RHSA-2024:4697MediumCVSS 7.5

Red Hat Security Advisory: Red Hat build of Cryostat security update

Published
July 22, 2024
Last Modified
August 10, 2026

🔗 CVE IDs covered (2)

CVE-2024-24788 →CVE-2024-24790 →

📋 Description

CVE-2024-24788 — golang: net: malformed DNS message can cause infinite loop CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

🎯 Affected products19

  • Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-db-rhel8@sha256:40623b160d9d1ec30e568a5f2465e973731d7075a75e9494c57f427c80851a58_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-db-rhel8@sha256:fd46ca2d4426dfb665744232cd43fdf822b1d10ceee56c8a4423eb32f2b02d22_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:f32c3f4c83f36f02b43a1134e2b443a15314d514a95920c4a1753fc710b1361c_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:f66483faeac9a40cde6071f8a1dbdb94e7925df468b5726c206d10d25bc2f49c_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-operator-bundle@sha256:76e44b49523e3d243d1d73d9790d0941213a03f270b1e76afe07c48e51f15146_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-operator-bundle@sha256:b2691ae75ad89d02d7d746b9ef13706df5036a724a8ac4de6880c056bd969f5a_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:cdf9f0cf5617e77b3aea6e1f5097acfcd48c918c6bb57fc84af7a1f20be40d9a_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:f57d01c58423176fdca76af6b4e6d2672b2f7c2cc093e7da317ee5931093dcf8_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-reports-rhel8@sha256:50099a32dd268be7db0e870819705fee473c3c83f213361d2a1ecf4660287c16_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-reports-rhel8@sha256:e4920c127c4ece8796ace167a6032b6afe7b684731782cfa6e9cf376f660f674_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8-operator@sha256:13eeb08ff96d003bc6eb05be4ce000a34456f7b101f84a58c95ca0df8cd76182_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8-operator@sha256:cd80dde7f240ed7d600bd869bc32dadeca137b5ab6d1d6d9e8de5c6b71070c34_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8@sha256:4a49628cbab41240fbe372971e86b32bb6bbd5fbe7143fbbde903f5f36d0e6e0_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8@sha256:5e7f6388263e592f90d50283678f48825b280b53a2eba722239c7a77a4451b09_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-storage-rhel8@sha256:653f2cce1486cd628cd9fd679ac308e029a01b8e3a6b284efc35538bc99f87b4_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-storage-rhel8@sha256:70c748f3d61253536ee609f0362cce0a1537251bf2ec3d3f4bf7b0d4c002bf67_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/jfr-datasource-rhel8@sha256:3755f9226007651bfb010ab235f039b715e8268666133eda974fba742372f1fe_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/jfr-datasource-rhel8@sha256:bc318bc151465d4672c6c07d7535bec2e40d97f7c8d158eefff1f63e242212dd_amd64 as a component of Cryostat 3 on RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)