RHSA-2024:4464LowCVSS 7.5
Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.4 security updates and bug fixes
🔗 CVE IDs covered (2)
📋 Description
CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2024-4068 — braces: fails to limit the number of characters it can handle
🔗 References (13)
- selfhttps://access.redhat.com/errata/RHSA-2024:4464
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://issues.redhat.com/browse/ACM-11006
- externalhttps://issues.redhat.com/browse/ACM-11662
- externalhttps://issues.redhat.com/browse/ACM-11961
- externalhttps://issues.redhat.com/browse/ACM-11986
- externalhttps://issues.redhat.com/browse/ACM-12028
- externalhttps://issues.redhat.com/browse/ACM-12091
- externalhttps://issues.redhat.com/browse/ACM-12133
- externalhttps://issues.redhat.com/browse/ACM-12258
- externalhttps://issues.redhat.com/browse/ACM-12405
- externalhttps://issues.redhat.com/browse/ACM-12436
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4464.json