RHBA-2023:7585
Vulnerability from csaf_redhat - Published: 2023-11-29 16:18 - Updated: 2026-08-11 20:49Summary
Red Hat Bug Fix Advisory: LVMS 4.12.z bug fix update
Severity
Important
Notes
Topic: Updated container images that fix multiple bugs are now available
for LVMS 4.12.z.
Details: Logical volume manager storage (LVMS) uses the TopoLVM CSI driver to
dynamically provision local storage on single node OpenShift clusters.
Logical volume manager storage creates thin-provisioned volumes using the
Logical Volume Manager and provides dynamic provisioning of block storage
on a single node, limited resources SNO cluster.
Users of LVMS are advised to upgrade to the latest version of the LVMS in
OpenShift Container Platform, which fixes these bugs and adds these
enhancements.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated container images that fix multiple bugs are now available\nfor LVMS 4.12.z.",
"title": "Topic"
},
{
"category": "general",
"text": "Logical volume manager storage (LVMS) uses the TopoLVM CSI driver to\ndynamically provision local storage on single node OpenShift clusters.\n\nLogical volume manager storage creates thin-provisioned volumes using the\nLogical Volume Manager and provides dynamic provisioning of block storage\non a single node, limited resources SNO cluster.\n\nUsers of LVMS are advised to upgrade to the latest version of the LVMS in\nOpenShift Container Platform, which fixes these bugs and adds these\nenhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2023:7585",
"url": "https://access.redhat.com/errata/RHBA-2023:7585"
},
{
"category": "external",
"summary": "OCPBUGS-22384",
"url": "https://issues.redhat.com/browse/OCPBUGS-22384"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_7585.json"
}
],
"title": "Red Hat Bug Fix Advisory: LVMS 4.12.z bug fix update",
"tracking": {
"current_release_date": "2026-08-11T20:49:04+00:00",
"generator": {
"date": "2026-08-11T20:49:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHBA-2023:7585",
"initial_release_date": "2023-11-29T16:18:28+00:00",
"revision_history": [
{
"date": "2023-11-29T16:18:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-11-29T16:18:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T20:49:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "LVMS 4.12 for RHEL 8",
"product": {
"name": "LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:lvms:4.12::el8"
}
}
}
],
"category": "product_family",
"name": "logical volume manager storage"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"product_id": "lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.12.2-3"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"product_id": "lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"product_id": "lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.12.2-2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"product_id": "lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.12.2-3"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"product_id": "lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"product_id": "lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.12.2-2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"product_id": "lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.12.2-3"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64",
"product_id": "lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.12.2-2"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"product_id": "lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.12.2-3"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.12.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"product_id": "lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.12.2-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"relates_to_product_reference": "8Base-LVMS-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64 as a component of LVMS 4.12 for RHEL 8",
"product_id": "8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64",
"relates_to_product_reference": "8Base-LVMS-4.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-39325",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2023-10-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2243296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE is related to CVE-2023-44487.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.\n\nAs go-lang vendors its dependencies, a package may contain a library with a known vulnerability, solely because of lower tier libraries including it as a part of its dependencies, but the vulnerable code is not reachable at runtime. In such cases the issue is not exploitable. We classify these situations as \u201cNot affected\u201d or \u201cWill not fix,\u201d depending on the risk of breaking other unrelated packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39325"
},
{
"category": "external",
"summary": "RHBZ#2243296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
},
{
"category": "external",
"summary": "RHSB-2023-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-44487",
"url": "https://access.redhat.com/security/cve/CVE-2023-44487"
},
{
"category": "external",
"summary": "https://go.dev/issue/63417",
"url": "https://go.dev/issue/63417"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2023-2102",
"url": "https://pkg.go.dev/vuln/GO-2023-2102"
},
{
"category": "external",
"summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
}
],
"release_date": "2023-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-11-29T16:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2023:7585"
},
{
"category": "workaround",
"details": "The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
"product_ids": [
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:7fe4d2f8952aec2363a41cfa52d8a5af8eeaad0b825305ad7c3ded5c66d8e880_amd64",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:a0a5223ceba00ba2f7c1c412b9be12e6de067b15a77e1d36c68fa2c33e0b2ed3_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:d90a99e55479c81464958af10d373080f68f6472448cb3e64d277d58c3edb9fe_s390x",
"8Base-LVMS-4.12:lvms4/lvms-must-gather-rhel8@sha256:e9f67e0566688a35bbcb466f2fa2c387dfcadbd075d775f47eb768de1b8634c1_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:3d45d0f9163fcafd6887dd6ab1a46f95201896febd05a1f3c9c92fc8da2cd613_arm64",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:6069c716a5204b195d7d7ac2101872cce2719fa4eaf5fa870df8dc0e40807da3_s390x",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:9f31b8ca61b9c36a4c1543ade4a9bd3cdf7471f49262183abdcfd2e6ed963711_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-operator-bundle@sha256:a8e7fc912fa5f64c16fcae7eb764ff048c1a7d04e0e7b3903a66aa07d7c1ebc6_amd64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:2522f3d2dfa776c3aa5cdea16df5d7d12ef5224db2d83182c62c013a4f6b51cc_ppc64le",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:8754ba369dfd3eab19c617960c4c8702766de735c55e6d94184917e58c80073f_s390x",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:cb8af860369ac67091ae5fc6cf722a056fda251c30a00f181a80d5a4a061a1ca_arm64",
"8Base-LVMS-4.12:lvms4/lvms-rhel8-operator@sha256:dad91322329e2f779963cc0f99b467971d548e8da704661e7e0e4a8fecbff61d_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:72cb4ec110b115061c7025d1e1e696361cd3e948f49205295d7137bde437d041_amd64",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:8f9402ccaaf0c0e0e2eb05997da4603dfa2d56798537bbf63fb9132a78d298d1_ppc64le",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:ac9dd4ba6deb0983f8ad423743f14aa11a3b2cf5be26b79294c503e3078d3a68_s390x",
"8Base-LVMS-4.12:lvms4/topolvm-rhel8@sha256:eef9906cf3d713d2253962925f83058eb1b83f2d643d5f1c160a0504c0bc7eb2_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…