RHSA-2024:3315HighCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.13.9 Images security update

Published
May 23, 2024
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products93

  • CNV 4.13 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:7a8c5cb9a2d181655afdcaf5ee03e73cfb19cc5aa48fa83141b0ec23fd15479c_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:ba1e64ed8fa10a0296fd4be542bf33db460a95ba7b681a6715227c5d3669d522_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:73efe44afd508b223523d6685f7e2da6eff256e7bf396dcb791a9ec0f1e7b683_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:7c27f9ed6c464d7d1156fa10571cda758d96482c64ac2dbdde782dff4f11142a_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b38384488e4c21fe71ccfa04d05da97b7f8536576313d673cb226d9b60e7ebf_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:dc072fceba2d988e979a439519d7b5a761dccebdd2e890473a0faf19b4c0f0df_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:1eb68e0b0ba45452795bbbc441e0c739ec77d62ca5209367ef1bbe2aafb8e151_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:55959ccbf537de95f356bfb866d0e94132c1a1f202cb62a14418b50cd4ea2792_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:08e70ace08c71c1d73a680a1f7225e2eb5aa81bd3b3faada8d89eb5e7a91e693_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:af63a779a48897bb0a72070dcce26174696b6ea50e2bafc129745d8a57005c29_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:7bdbe06d810af21ff028bfe466b372578a3aa5b2312fbe883b02f12a887c284d_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:ae088594ce07499834b625144a37ea6963e08d4133b4406df7c26ce5bf2831b6_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:03c178c83c0aea8091ed4122fae030febfddd6422d15d7dc5df19ddd08a70907_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:b5dbb45e69050612ff324f5a8e3c6fc0acd9320ebd1117bb65dbf565fb4461f8_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:254f6b5aa19be44e492c57eac47874fcc332242953c923753de317c90dcb8c96_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:a4272c69cf81355dad651e8c694c3b62747023decb6cd1ae22d16cc36f0bad74_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:aac94783f1fc202506bca64f8e85cf964e7751c073cf7f1210864928f74ced6f_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:b4aed92d20372b9bcbf8c97a8e9426c61d213fbcf380fdfc7c42c64503a50496_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:226e6b33ac719000a1e3fddfbef50fa4c6a798f04b4986ab37d8765108d00fd3_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:8bb87dd1cfd8bc5d922a8716ac623a2d4b340da95c4aaf51eafab722a684b94e_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:eb914756fe26e8a7e7d41d00ab150b9fcb94902051c2a2387b13ea7a8f1eae77_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:fa52bd6689370d0ed46ad57bf33680f349c7c6348acced6d6d8a49ed064d8acd_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:c96e6a66f612c2fcfa71daba2134874282d0fbdc94f037c50a82ab5a18f1abd9_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:ded7baf0552eb7c9b23f9e09e5723f93d935230418f30a3d3311680ea5238c7d_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:0558e4f507e084012205721f6dc7cf6eb2a4fd2a158070e8a2e5d82cbd84bda0_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:bb9622ab311b1c5517fd674373fd9ea8a6a934551820a9d64f645732fd18f459_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:9ab866dbb135fb76d6458f4485cd9784932c52e5c1c4417115a2ed19ea399fd4_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:e2f2f00a19444062091c8187dad71eff592155d3c568b6604b3394d1ac6f07eb_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-ssp-operator-rhel9@sha256:13f9b9c2e36aa67f71ba9ac08684072714118b4e8350db376e98c83845b31bd0_amd64 as a component of CNV 4.13 for RHEL 9
  • +63 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 References (4)