RHSA-2024:4464LowCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.4 security updates and bug fixes

Published
July 10, 2024
Last Modified
August 31, 2026

🔗 CVE IDs covered (2)

CVE-2024-4068 →CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2024-4068 — braces: fails to limit the number of characters it can handle

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:b9ef8ca2a002c616c6644cf16b80d5901d7b46034dc7e57ec1dd1d260cf0e32b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:bd41dedb13ae9360d2e856ec6d52ea35b726425a65e92a00cd6037344ae5780e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:dac35e93ff173bd30fefbdec8676fb605e28368aec3eccc4ac603f16eadcf31d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:e8c9920427522b7ef645422b85ff1585e65b9d659c792e57201dfc06d6a13ffa_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:65d709ef780d8d867c145b1ddf8e7031bd8e710972b21ed2d7b9d9ede0bfdb43_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:87988ad277b62bbcc061dbe4242bfc2edcc21dc98c4c7c66385131c0425b0fa7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:9af1cb9605a8fdf7212a079ed8fa51b110b367c705a51651ba3933e936519e7f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:c6e3728b6687b8c83a11c326e4fd098ceef3f501725efbdfcb0ded0645a1473e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:3101f1389311c0006c0fb9953c44d5fff9e968597952103a5a873a7a4c4707da_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:4536de55598f032ad91056c779ec2faea5c28de557a730d50cb2b2aba9b3bf00_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:587fc80d3d6e3f2295272934fb39cfa3b96f5a2652a533b6b01cc6b04d10cb66_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:63246c061e7960a656cb66c8ccca2b7bed943c9a1fe96a28f9cd99829608cda5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:1cd1c6a91611569a855444430c527a8bebbe113f77dd47dcfc2b8305c3a26a13_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:3a59dd5e30b37f1e1feffba959d88d3aab37701500203afb71b2d38958236b85_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:b488d250bc1c82f3f7e26a1bc741dee02e57b3e3d40cf2965e541d2c5727ec65_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:df4024e8506d0926ad81943684532dd9e4054f26d23da6e329f593239b5a1513_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:66bca60baa85bc23963b5955fe57e8b7b7038c1088e2ce60f1fedc1a41d944dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:92d087992acf383c2f06ed92996049c412fc1fef76be10fc40eb6ba2e4b2f9be_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:bfc79c952b6f62658ef36373af72e6213de78ba1c3a18f018add4295d8ae72f8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:fb9fa96ebaba320dd723e7d5727b20c63f66aa6c39f460a6270c572354123fd9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:190d00bcb1bdbf289cc4ae87f738aeabe04470194e51870c572876e4c118d712_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:304e9a12e0c7b7be0444efd26764d32818fc3ad1ad936b565232f5f82a5f72fe_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:cc65cb3804a7e6150028a6f1c60fcbdb78c42689769ff9378922491481947aed_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0b885dfd28d82220fdb03b7bca0e1ed2fc941bc712e536af71e4e11ee9defee4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:53cd755cea5a527c089321e5571c14ad0fd5d55b16e7c2acddc2a7c9670cffd2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8f18c68e47b66926d14795818f3a1dc21ffdcbcf1a220c7518194416602b19ac_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:be5be2fe888521fd8ac6d7ebca3cf127724128eb6ff4e11f90d61a4af60f1bee_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:8da9c5a18b42861d11e3df3f37b5f47b810af1b25beec208ce75b6f69d913ecd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:91ec246784f1e7cdd0c20ab36ea09f13e553c043851699dae6191ea1ce101a61_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • +146 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html-single/install/index#installing Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (13)