RHSA-2024:1434MediumCVSS 5.3

Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.1.1 operator/operand containers

Published
March 20, 2024
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2023-39326 →

📋 Description

CVE-2023-39326 — golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

🎯 Affected products77

  • Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-agent-rhel8@sha256:89bc94cdd7e1133d0dd40ce03b2e8a4482668891f357c067a02fa87b6b60573b_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-agent-rhel8@sha256:c1e99baadd03e3bc7ee37931eead320870ffbde5b1043a96fbefee2e21ec760e_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-agent-rhel8@sha256:debe5d16c0bdd9ed8928ffef377182b84bd77b6df40a5483c9609def2c8e5f53_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-agent-rhel8@sha256:f8dd7e99597745e893e34d830241c8b469471b66d53e43e47de70daa8d382631_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-all-in-one-rhel8@sha256:2b6ec1b22e1f2410d8864d7f9c0d9d3db6a708e41ef1b7b6915c70ab91b68e50_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-all-in-one-rhel8@sha256:3be0995542a08f2d27407eeb2c63fbb28da756b35301e4773927b14dd39c650f_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-all-in-one-rhel8@sha256:87978a2f333c03e58e597e22cd07572d85ebb7ab08e6bb1b69195ae5301a50bf_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-all-in-one-rhel8@sha256:f38b52f9153fa22513f8ec801354ae4b6ac88ad6d483f17953536e65a19bd918_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-collector-rhel8@sha256:245727341fbb6991f7576a4f5e840840fdee47ae7825e7ebe1aa5420f2b8e6ba_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-collector-rhel8@sha256:2d45797b4a5105e540694f7dc522e56af71c3ac28049d7596c917252f82e6623_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-collector-rhel8@sha256:56407863d57cfdc5bed923ccfedfad6635c2391834f7640daf6dcefbbe84e05b_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-collector-rhel8@sha256:dc061834866408bf3e9cc6e91210ce69846a92a260b1e89a7c9262a110fb3cac_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-index-cleaner-rhel8@sha256:00fbad682a3c18ccf42baa6f5870c157a7c7de357f1d47c85fb5e3e4b17aaedd_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-index-cleaner-rhel8@sha256:30a71079fd7f4351ec0fa7243bd5ea1296df76500fb87b26a2d6bc2efe08588c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-index-cleaner-rhel8@sha256:905a600cf68d13a86a0806a386ad5f68fb3d7919ed5088e962085f3a5af9f6f9_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-index-cleaner-rhel8@sha256:c930aeaa8c319590b65a2ae4b16f8db9c2b5df9ccb4ace21b4c1b59e0deffd54_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-rollover-rhel8@sha256:4aa09887b1fc79b1700f77c8f2401920d04c717e22e1226daa1ec9e1b3d805d2_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-rollover-rhel8@sha256:a927666fa3475220832dd29fcc91a9227beb3452d6fb81a4b6000c02ebf643a9_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-rollover-rhel8@sha256:b3ba030b0eb51c955ffcbc2917efa4d6187c20ff33c3ff156329d4c72ebb9a00_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-es-rollover-rhel8@sha256:ce28418d27e800c125710d892e8658ddd70d0b216572d96334a509204e7be827_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-ingester-rhel8@sha256:11f1b766cc585802e13760ce998c3485f2550c65517d1ffd704067251759643c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-ingester-rhel8@sha256:77cbd16fe4e867ed36a50e6273369485a10368472ceff1e31dff88768a008373_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-ingester-rhel8@sha256:90c812ddc5faa0fa1e343b74488da5edf312fc6501f0f404413e1c1dfa1a631d_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-ingester-rhel8@sha256:ff93c61f44943a07cc749086cf1b6346a93207ee6ad6d75e48c329d7870ab552_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-operator-bundle@sha256:36bfcba4c3c3ba68ef04877bcf18a970e9f27451a59f306b7cb3c47b991a9450_s390x as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-operator-bundle@sha256:7c2ef6323b63f537eb2d9d13865ca5eabc09b469741f8178cd96cd01190523fe_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-operator-bundle@sha256:ddb687858a34d38d9ca8610d489fb21bdae4942008f3d2aeb4bc6186ee404a03_amd64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-operator-bundle@sha256:e6fafe248ec479d6746df51920e67ea79f7f52173650af4e828b74188528c527_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • rhosdt/jaeger-query-rhel8@sha256:1d7e919e2f98cd6dc2b1ad0c5056af4c7bfabcdceece467cad18d5e022360038_arm64 as a component of Red Hat OpenShift distributed tracing 3.1
  • +47 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available for this flaw.

🔗 References (4)