RHSA-2024:8329HighCVSS 7.5

Red Hat Security Advisory: Red Hat build of Cryostat security update

Published
October 22, 2024
Last Modified
August 19, 2026

🔗 CVE IDs covered (4)

CVE-2024-34156 →CVE-2024-34158 →CVE-2024-40094 →CVE-2024-34155 →

📋 Description

CVE-2024-34155 — go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34158 — go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion CVE-2024-40094 — graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java

🎯 Affected products19

  • Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-db-rhel8@sha256:024661d83d12becbf66ea170dae5ec0f61447912edb04195580731ef342dbd29_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-db-rhel8@sha256:27642ac1b50de6deb1c40b9d0b39833b8ec7b36983872ebd10e0edc290967538_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:21a0f08768e4e19ce4f6d0c50f7afd8251308429a5770cff6dc6be3a878d2fb4_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:37e3e1d43ed523fa3fabcb1b5f7b6a3732a037e259e87e484a6ef567e2df82c3_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-operator-bundle@sha256:37f122a3c9f96ab7aa9c4ad6e0e4beaa50411047b2fdbd7211b70d667b0cb0ca_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-operator-bundle@sha256:a932512a04c2ca801f1732342d4af6c3d70d0183effe6044e5a8737cf19e0dd0_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:679d6c647433974808d48f3ce76ce47921f5c6cd3119d953c853046e39545680_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:bf93142d4955102b7255a2520d4866e85421f0a39ac93b24d36abff61f7d2a8c_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-reports-rhel8@sha256:7dec56889b09430f459f0de139e278c0b1724abef9eaea34934b737cd1deec80_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-reports-rhel8@sha256:eaf9db606e366ea748716ec7b0b8677a876f0fecbb448eaa333b989f52eb8bbb_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8-operator@sha256:8ebce6d1a55bec2854e1f7063fb971b9b76305060d325a83554aa75189257859_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8-operator@sha256:ceea652a2e315293571bdca6d4862b02f3d879b49b1c2e1488ec3938a4573c75_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8@sha256:7ae4c5c565a87d90a7cc5f1e5015de2e69ff392c85efb3bd7d0c230b4dea1b32_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-rhel8@sha256:9dc761a6fa1853f89444062bc5fe5cb372552ee6f10c4c74af6a5939c9394e4b_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-storage-rhel8@sha256:59d1ed4ceb69888c67b612bcd5bea3c1c2174118c49d0b42fc463e4790c5b849_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/cryostat-storage-rhel8@sha256:eb689a788e15b45fe72f7fbd910611eeb86629e48aedb9fe5b50e8519523cfee_amd64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/jfr-datasource-rhel8@sha256:fc6cd0267a89c5fe4e0f7e4a09d566ce34768ef8e2b0b48c6fd69d318a84d425_arm64 as a component of Cryostat 3 on RHEL 8
  • cryostat-tech-preview/jfr-datasource-rhel8@sha256:ffa084d43873b7a87d3c6685399f196f019a34503e0bda071e2a4278197c1865_amd64 as a component of Cryostat 3 on RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)