rhsa-2023_5851
Vulnerability from csaf_redhat
Published
2023-10-18 16:23
Modified
2024-12-18 04:46
Summary
Red Hat Security Advisory: RHACS 4.1 enhancement and security update
Notes
Topic
Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes new features and bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release of RHACS 4.1.4 includes fixes for the following security vulnerabilities:
* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* Various CVEs in containers for glibc security issues
A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
RHACS 4.1.4 includes a new default policy called "Rapid Reset: Denial of Service Vulnerability in HTTP/2 Protocol". This policy alerts on deployments with images containing components that are susceptible to a Denial of Service (DoS) vulnerability for HTTP/2 servers, based on CVE-2023-44487 and CVE-2023-39325. This policy applies to the build or deploy life cycle stage.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes new features and bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release of RHACS 4.1.4 includes fixes for the following security vulnerabilities:\n\n* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)\n\n* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\n* Various CVEs in containers for glibc security issues\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nRHACS 4.1.4 includes a new default policy called \"Rapid Reset: Denial of Service Vulnerability in HTTP/2 Protocol\". This policy alerts on deployments with images containing components that are susceptible to a Denial of Service (DoS) vulnerability for HTTP/2 servers, based on CVE-2023-44487 and CVE-2023-39325. This policy applies to the build or deploy life cycle stage.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2023:5851",
"url": "https://access.redhat.com/errata/RHSA-2023:5851"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
},
{
"category": "external",
"summary": "https://docs.openshift.com/acs/4.1/release_notes/41-release-notes.html",
"url": "https://docs.openshift.com/acs/4.1/release_notes/41-release-notes.html"
},
{
"category": "external",
"summary": "2242803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
},
{
"category": "external",
"summary": "2243296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
},
{
"category": "external",
"summary": "ROX-20196",
"url": "https://issues.redhat.com/browse/ROX-20196"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5851.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.1 enhancement and security update",
"tracking": {
"current_release_date": "2024-12-18T04:46:18+00:00",
"generator": {
"date": "2024-12-18T04:46:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2023:5851",
"initial_release_date": "2023-10-18T16:23:22+00:00",
"revision_history": [
{
"date": "2023-10-18T16:23:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-10-18T16:23:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-18T04:46:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHACS 4.1 for RHEL 8",
"product": {
"name": "RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.1.4-8"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.1.4-7"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.1.4-5"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.1.4-8"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.1.4-7"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x",
"product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.1.4-5"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.1.4-8"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.1.4-7"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.1.4-5"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.1.4-4"
}
}
},
{
"category": "product_version",
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"product": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.1.4-5"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64 as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"relates_to_product_reference": "8Base-RHACS-4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x as a component of RHACS 4.1 for RHEL 8",
"product_id": "8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
},
"product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x",
"relates_to_product_reference": "8Base-RHACS-4.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-39325",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2023-10-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2243296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE is related to CVE-2023-44487.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39325"
},
{
"category": "external",
"summary": "RHBZ#2243296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
},
{
"category": "external",
"summary": "RHSB-2023-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-44487",
"url": "https://access.redhat.com/security/cve/CVE-2023-44487"
},
{
"category": "external",
"summary": "https://go.dev/issue/63417",
"url": "https://go.dev/issue/63417"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2023-2102",
"url": "https://pkg.go.dev/vuln/GO-2023-2102"
},
{
"category": "external",
"summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
}
],
"release_date": "2023-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-10-18T16:23:22+00:00",
"details": "If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.4.",
"product_ids": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:5851"
},
{
"category": "workaround",
"details": "The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
"product_ids": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)"
},
{
"cve": "CVE-2023-44487",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2023-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2242803"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the Rapid Reset Attack in the Go language packages.\r\n\r\nSecurity Bulletin\r\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2023-003",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "NGINX has been marked as Moderate Impact because, for performance and resource consumption reasons, NGINX limits the number of concurrent streams to a default of 128. In addition, to optimally balance network and server performance, NGINX allows the client to persist HTTP connections for up to 1000 requests by default using an HTTP keepalive.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.\n\nrhc component is no longer impacted by CVE-2023-44487 \u0026 CVE-2023-39325.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-44487"
},
{
"category": "external",
"summary": "RHBZ#2242803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
},
{
"category": "external",
"summary": "RHSB-2023-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487"
},
{
"category": "external",
"summary": "https://github.com/dotnet/announcements/issues/277",
"url": "https://github.com/dotnet/announcements/issues/277"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2023-2102",
"url": "https://pkg.go.dev/vuln/GO-2023-2102"
},
{
"category": "external",
"summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
},
{
"category": "external",
"summary": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
"url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2023-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-10-18T16:23:22+00:00",
"details": "If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.4.",
"product_ids": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:5851"
},
{
"category": "workaround",
"details": "Users are strongly urged to update their software as soon as fixes are available. \nThere are several mitigation approaches for this flaw. \n\n1. If circumstances permit, users may disable http2 endpoints to circumvent the flaw altogether until a fix is available.\n2. IP-based blocking or flood protection and rate control tools may be used at network endpoints to filter incoming traffic.\n3. Several package specific mitigations are also available. \n a. nginx: https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/\n b. netty: https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p\n c. haproxy: https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487\n d. nghttp2: https://github.com/nghttp2/nghttp2/security/advisories/GHSA-vx74-f528-fxqg\n e. golang: The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
"product_ids": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:01bd7d0eb01bbccaedb4bd874f9d25ec1de15b6ffa7d9afa772c633c901b4d19_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:bed6dd0b095914635cc4c7492e7c7f312bc84138df4dbb63ce632835697da1eb_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:192562d3cc181ff2cc14b9bf7202dd1b09c3d25c3308154d3878834c42139b8a_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:39b9d467f3b5fc5813fc2b2a27e187b62673817d98ce496a5f35551046110ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6d6c5af603b2ca083e7a7600680e3e121daedc43c53b4c0c760463fc5e569c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:2d91c9e119a9c6f69f5f6b44fd54cdb89a255a1f831c14c0346291a085cf1255_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-main-rhel8@sha256:70119ac2a99ae2b42a84f18d5dfc5a719ffd183a2c6587fd2654e17b207cbaa7_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:54e95a79b10a119472b6ef0351ff878e6a384b8e3100d25e943678bb120ed322_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:594533fdc64148e9222d6a1bfaa2ac9c912478161035b2aadb3161e6a6c7de71_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-operator-bundle@sha256:f996eaff3c93ae2a0589c038358da2932d85f7642289e6b5cc63e87af130e0f2_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:38933d28d8f623e8e421708f34a56e42cddd66b09c77b90ba7d0bab1ee10e6a6_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:564a8cbb9da8f2daab1d4163a4dfffdb2fadf87808cee3d4cc0ca210cf37801c_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-rhel8-operator@sha256:62be9d1228353bb890192444a8f79aa10afa9acf57b6fbae49e6751d4355eced_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e3088b93eaf3e6114ec3706f4a86cf9a1135a19b2b9274ccd5a47d4d530d5ead_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:024076d8e8f8759397d35ccf6d7e23c72e301d9ac76f9f3783802306412b6e82_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:16c06f7d13b140eace33c92e4de25080a369fb8cb07e8cd37dab1c77e20b98dc_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:8ec71419eb15e2fc5300fdc7bcab0422bd0c467d718a0a37568b80df4272a0ff_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64",
"8Base-RHACS-4.1:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2023-10-10T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.