Vulnerability-Lookup

RHSA-2023_6251

Vulnerability from csaf_redhat - Published: 2023-11-01 16:14 - Updated: 2024-12-18 04:52

Summary

Red Hat Security Advisory: OpenShift Virtualization 4.11.7 Images security and bug fix update

Severity

Important

Notes

Topic: Red Hat OpenShift Virtualization release 4.11.7 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.11.7 images. Security Fix(es): * golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325) * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * 4.11.7 containers (BZ#2246329)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-41723

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64		—	Vendor Fix fix

Known not affected 42 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64		—

Threats

Impact Moderate

CVE-2023-39325

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 39 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64	—	Vendor Fix fix Workaround

Known not affected 4 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64	—	Workaround

Threats

Impact Important

CVE-2023-44487

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64		—	Vendor Fix fix Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64		—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64	—	Workaround
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64	—	Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

References

35 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:6251	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/vulnerabilitie…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2178358	external
https://bugzilla.redhat.com/show_bug.cgi?id=2242803	external
https://bugzilla.redhat.com/show_bug.cgi?id=2243296	external
https://bugzilla.redhat.com/show_bug.cgi?id=2246329	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-41723	self
https://bugzilla.redhat.com/show_bug.cgi?id=2178358	external
https://www.cve.org/CVERecord?id=CVE-2022-41723	external
https://nvd.nist.gov/vuln/detail/CVE-2022-41723	external
https://github.com/advisories/GHSA-vvpx-j8f3-3w6h	external
https://go.dev/cl/468135	external
https://go.dev/cl/468295	external
https://go.dev/issue/57855	external
https://groups.google.com/g/golang-announce/c/V0a…	external
https://pkg.go.dev/vuln/GO-2023-1571	external
https://vuln.go.dev/ID/GO-2023-1571.json	external
https://access.redhat.com/security/cve/CVE-2023-39325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2243296	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2023-39325	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39325	external
https://access.redhat.com/security/cve/CVE-2023-44487	external
https://go.dev/issue/63417	external
https://pkg.go.dev/vuln/GO-2023-2102	external
https://www.cisa.gov/news-events/alerts/2023/10/1…	external
https://access.redhat.com/security/cve/CVE-2023-44487	self
https://bugzilla.redhat.com/show_bug.cgi?id=2242803	external
https://www.cve.org/CVERecord?id=CVE-2023-44487	external
https://nvd.nist.gov/vuln/detail/CVE-2023-44487	external
https://github.com/dotnet/announcements/issues/277	external
https://www.nginx.com/blog/http-2-rapid-reset-att…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

Acknowledgments

Catena Cyber Philippe Antoine

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release 4.11.7 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization 4.11.7 images.\n\nSecurity Fix(es):\n\n* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)\n\n* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* 4.11.7 containers (BZ#2246329)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:6251",
        "url": "https://access.redhat.com/errata/RHSA-2023:6251"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003",
        "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
      },
      {
        "category": "external",
        "summary": "2178358",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2178358"
      },
      {
        "category": "external",
        "summary": "2242803",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
      },
      {
        "category": "external",
        "summary": "2243296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
      },
      {
        "category": "external",
        "summary": "2246329",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246329"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6251.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization 4.11.7 Images security and bug fix update",
    "tracking": {
      "current_release_date": "2024-12-18T04:52:55+00:00",
      "generator": {
        "date": "2024-12-18T04:52:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2023:6251",
      "initial_release_date": "2023-11-01T16:14:42+00:00",
      "revision_history": [
        {
          "date": "2023-11-01T16:14:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-11-01T16:14:42+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-18T04:52:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CNV 4.11 for RHEL 8",
                "product": {
                  "name": "CNV 4.11 for RHEL 8",
                  "product_id": "8Base-CNV-4.11",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.11::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
                "product": {
                  "name": "container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
                  "product_id": "container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
                "product": {
                  "name": "container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
                  "product_id": "container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/checkup-framework\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
                "product": {
                  "name": "container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
                  "product_id": "container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
                "product": {
                  "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
                  "product_id": "container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
                "product": {
                  "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
                  "product_id": "container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel8\u0026tag=v4.11.7-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
                "product": {
                  "name": "container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
                  "product_id": "container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hco-bundle-registry\u0026tag=v4.11.7-35"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                  "product_id": "container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                  "product_id": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver-rhel8\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
                  "product_id": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
                  "product_id": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8-operator\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
                "product": {
                  "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
                  "product_id": "container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-operator\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
                "product": {
                  "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
                  "product_id": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-webhook-rhel8\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
                "product": {
                  "name": "container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
                  "product_id": "container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
                  "product_id": "container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin\u0026tag=v4.11.7-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
                  "product_id": "container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ssp-operator\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-copy-template\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-datavolume\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-operator\u0026tag=v4.11.7-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status\u0026tag=v4.11.7-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
                  "product_id": "container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-template-validator\u0026tag=v4.11.7-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
                "product": {
                  "name": "container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
                  "product_id": "container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
                "product": {
                  "name": "container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
                  "product_id": "container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-marker\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
                "product": {
                  "name": "container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
                  "product_id": "container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
                  "product_id": "container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
                  "product_id": "container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
                  "product_id": "container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
                  "product_id": "container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
                "product": {
                  "name": "container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
                  "product_id": "container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virtio-win\u0026tag=v4.11.7-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
                  "product_id": "container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
                  "product_id": "container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator\u0026tag=v4.11.7-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64",
                "product": {
                  "name": "container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64",
                  "product_id": "container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/vm-network-latency-checkup\u0026tag=v4.11.7-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64"
        },
        "product_reference": "container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64"
        },
        "product_reference": "container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64"
        },
        "product_reference": "container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64"
        },
        "product_reference": "container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64"
        },
        "product_reference": "container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64"
        },
        "product_reference": "container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64"
        },
        "product_reference": "container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64"
        },
        "product_reference": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64"
        },
        "product_reference": "container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64"
        },
        "product_reference": "container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64"
        },
        "product_reference": "container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64"
        },
        "product_reference": "container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64"
        },
        "product_reference": "container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64"
        },
        "product_reference": "container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64"
        },
        "product_reference": "container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64"
        },
        "product_reference": "container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64"
        },
        "product_reference": "container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64"
        },
        "product_reference": "container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64"
        },
        "product_reference": "container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
        },
        "product_reference": "container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Philippe Antoine"
          ],
          "organization": "Catena Cyber"
        }
      ],
      "cve": "CVE-2022-41723",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-03-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2178358"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Within OpenShift Container Platform, the maximum impact of this vulnerability is a denial of service against an individual container so the impact could not cascade across the entire infrastructure, this vulnerability is rated Moderate impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-41723"
        },
        {
          "category": "external",
          "summary": "RHBZ#2178358",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2178358"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-41723",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-41723"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h",
          "url": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/468135",
          "url": "https://go.dev/cl/468135"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/468295",
          "url": "https://go.dev/cl/468295"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/57855",
          "url": "https://go.dev/issue/57855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E",
          "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2023-1571",
          "url": "https://pkg.go.dev/vuln/GO-2023-1571"
        },
        {
          "category": "external",
          "summary": "https://vuln.go.dev/ID/GO-2023-1571.json",
          "url": "https://vuln.go.dev/ID/GO-2023-1571.json"
        }
      ],
      "release_date": "2023-02-17T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-01T16:14:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6251"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding"
    },
    {
      "cve": "CVE-2023-39325",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-10-10T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2243296"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This CVE is related to CVE-2023-44487.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-39325"
        },
        {
          "category": "external",
          "summary": "RHBZ#2243296",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
        },
        {
          "category": "external",
          "summary": "RHSB-2023-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-39325",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2023-44487",
          "url": "https://access.redhat.com/security/cve/CVE-2023-44487"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/63417",
          "url": "https://go.dev/issue/63417"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2023-2102",
          "url": "https://pkg.go.dev/vuln/GO-2023-2102"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
          "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
        }
      ],
      "release_date": "2023-10-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-01T16:14:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6251"
        },
        {
          "category": "workaround",
          "details": "The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)"
    },
    {
      "cve": "CVE-2023-44487",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-10-09T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2242803"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the Rapid Reset Attack in the Go language packages.\r\n\r\nSecurity Bulletin\r\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2023-003",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "NGINX has been marked as Moderate Impact because, for performance and resource consumption reasons, NGINX limits the number of concurrent streams to a default of 128. In addition, to optimally balance network and server performance, NGINX allows the client to persist HTTP connections for up to 1000 requests by default using an HTTP keepalive.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.\n\nrhc component is no longer impacted by CVE-2023-44487 \u0026 CVE-2023-39325.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-44487"
        },
        {
          "category": "external",
          "summary": "RHBZ#2242803",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
        },
        {
          "category": "external",
          "summary": "RHSB-2023-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-44487",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487"
        },
        {
          "category": "external",
          "summary": "https://github.com/dotnet/announcements/issues/277",
          "url": "https://github.com/dotnet/announcements/issues/277"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2023-2102",
          "url": "https://pkg.go.dev/vuln/GO-2023-2102"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
          "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
          "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2023-10-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-01T16:14:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6251"
        },
        {
          "category": "workaround",
          "details": "Users are strongly urged to update their software as soon as fixes are available. \nThere are several mitigation approaches for this flaw. \n\n1. If circumstances permit, users may disable http2 endpoints to circumvent the flaw altogether until a fix is available.\n2. IP-based blocking or flood protection and rate control tools may be used at network endpoints to filter incoming traffic.\n3. Several package specific mitigations are also available. \n     a. nginx: https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/\n     b. netty: https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p\n     c. haproxy: https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487\n     d. nghttp2: https://github.com/nghttp2/nghttp2/security/advisories/GHSA-vx74-f528-fxqg\n     e. golang: The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:6ec0d63868d6c69891b96338782db6ddefb6eeeb155a8b316112cfa3b756885c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:7a9443d47b8f954670ff3a8f0196f26a3a7bb4b16d2c3469a22d01172f31fc26_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:bf77cbd3fa96da043778f1f27ccf009097f53a46ca1584b440a15623a6edde88_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:d34dbb657cb4a631ccca5687f05a9387d679cf03d9899c0843b4f1733ee64103_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:575bce5098573be251955aca405570171a458f6993d6735aa39b52012dd0320c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:d2530174f8d682e186b1be97d1e567927c1aaaa7fe5fa1f83eb826608515dccc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:20488cf9f269a34be9a3d82e04a28b598b26be0a495f51a47a8dba02f7e9d974_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:d0755533e714fde9377688064f67e3949d94db4307c36b16d9e4990caa2080b6_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:6a49eb5fa0d5d85d028753ccfda32c66c0d26f1d6bd4d264f0d7f1af7887e131_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:5d446416c7c4ac98bf24b5c0bf7631e7feb55ebb898aedace28f8484ae628cf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:3f8b6e4d39648595a62b087f49b9a8e8844bf2f9a743e32db69bdcc491831b55_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:cfb161f31bc459f160a31cf9ad4ec8f0d7ee9140c13b8ba2e6477cdb971f6384_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:3ff40d3759ea6c50aeb143a5aff6f798611267452eb8111361ef9e0a89260bf5_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:81fa9feb8418ebf53d9e386fc98a8ee45fd83c30496e3574626449ab19a10236_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:8c7d9751d790df2471a9e8606afcb2880b800ec713a089b2a801df247a0f3fec_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f4b0b6daf093a75fcd8d4cc61496a316f86899e8ce4217e9f761def5f9d0e794_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:33a16329639f805c0d75a0ed6fe699755938f602230104715c0ad3b545aaf7fa_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:caed594ab506d7cf550130d927b68bdcfb3707b8464f2d18da468d9b884c3017_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:4980e6eeadf62bedffff98982f0f5b5e426b0ab01867057dba027e87f9557ce4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:254f671bc0443d32ba60cfafa4ed4592c2030270b160c1e7b1d302d797bd9a82_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:69ceb3d47f3c8c32abcca8ec5ad7ebce42ce64e8200f77c1b829c2cb5495c478_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ec2ac2bedd9f14ff0fbdfe3844d67f1361d59eb379ef6dfcd0fa5727635bdea4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:a1fac42b6bf868c20ad974a0409cd62e68be20ea9e4ca5ff4ebc211bb9dc85ab_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:47b866156816f285cf7ea8b8d523e2ec84bc58751e1d593e98bf8ab493c8db09_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:0547ff01b9717560fd81ce291acc4b3e70098df3b80d42d35ec2b563b0ce035a_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7c44a0d3bb352c0327974ccb3c2054c6cff88fa58399b1e40409e197ad78d585_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:4eb3e9b62fa09edc3e678fa0afad10b8e1042fb95ddecaca7a48e79c392b3029_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:fd9dd050e1670ffd7f1816ebcced2a77a51aa4bbf96bec893f8b7e84b3824763_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:bedf2d810c355505de7b2dcb24b27d04b0ab94d3adc711d942ee830c71ff49a3_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:de581a993f71f57bced78261962524b1e1eaaf8f6c89549735475fad3b997093_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:9c5ac022e709ac0ecd77814138639b3b9e6d34fa9f98bc3ce4127b1d68af29f2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:192f40ae9ba79582d0f9ac7ca7f1eb1f8c44abd7c79345bd579807cc94a883f0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:ce436ec0a51e51ba209da49d6d877c7e07faf264b966849934c72d1c031a78dd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:1b503bfc4177444b360c4a1a470ac8322d3394fd9e8ebe7f2bad849249d2c6fd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:fc0aafe98acf811a0e94091a6dcec5f465ddc64e279ad250f6c8fa4225de7c7f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:029992238c9723c2760d24d502b95d22a46f3a1586e076da54863fc22f9cca35_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:3c80a72772b98e46fc1382c3dc6a7b8a41f50e8bde5a12362a121e1dd1d2cc64_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:841aca720b7082e72059f733ead2e02915e6ead7506d79ac6eff0b143390713e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:1480ad0874186f451bd95b51953940ad7589c2546715770be1b61f3e8dec3ea9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:8dc7b78fea1006af9bb0d62120b50964e2fc73ee049a0efe94d366aad296ab95_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:58f2d6b9b41d6a0af3a20d2ce491f2c2bf8b3f07b6ea0170b729f0db0626c21d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:9d28ad64ab3d2858ce9b1144a77816cc1ae07f53b37599fc24609a9429c0a0b8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2023-10-10T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)"
    }
  ]
}

CVE-2022-41723 (GCVE-0-2022-41723)

Vulnerability from cvelistv5 – Published: 2023-02-28 17:19 – Updated: 2025-05-05 16:12

Title

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

Summary

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE 400: Uncontrolled Resource Consumption
NVD-CWE-Other

Assigner

References

15 references

URL	Tags
https://go.dev/issue/57855
https://go.dev/cl/468135
https://go.dev/cl/468295
https://groups.google.com/g/golang-announce/c/V0a…
https://pkg.go.dev/vuln/GO-2023-1571
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://www.couchbase.com/alerts/
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-2023033…

Impacted products

3 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.19.6 (semver) Affected: 1.20.0-0 , < 1.20.1 (semver)
golang.org/x/net	golang.org/x/net/http2	Affected: 0 , < 0.7.0 (semver)
golang.org/x/net	golang.org/x/net/http2/hpack	Affected: 0 , < 0.7.0 (semver)

Credits

Philippe Antoine (Catena cyber)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:43.617Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20230331-0010/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/issue/57855"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/468135"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/468295"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/vuln/GO-2023-1571"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.couchbase.com/alerts/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-09"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41723",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:26:37.352634Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "NVD-CWE-Other",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:12:28.159Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.ServeTLS"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.19.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.1",
              "status": "affected",
              "version": "1.20.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2",
          "product": "golang.org/x/net/http2",
          "programRoutines": [
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "ConfigureServer"
            },
            {
              "name": "ConfigureTransport"
            },
            {
              "name": "ConfigureTransports"
            },
            {
              "name": "ConnectionError.Error"
            },
            {
              "name": "ErrCode.String"
            },
            {
              "name": "FrameHeader.String"
            },
            {
              "name": "FrameType.String"
            },
            {
              "name": "FrameWriteRequest.String"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "GoAwayError.Error"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Setting.String"
            },
            {
              "name": "SettingID.String"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "StreamError.Error"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "connError.Error"
            },
            {
              "name": "dataBuffer.Read"
            },
            {
              "name": "duplicatePseudoHeaderError.Error"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "headerFieldNameError.Error"
            },
            {
              "name": "headerFieldValueError.Error"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "pipe.Read"
            },
            {
              "name": "priorityWriteScheduler.CloseStream"
            },
            {
              "name": "priorityWriteScheduler.OpenStream"
            },
            {
              "name": "pseudoHeaderError.Error"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "requestBody.Read"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.SetReadDeadline"
            },
            {
              "name": "responseWriter.SetWriteDeadline"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "serverConn.CloseConn"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            },
            {
              "name": "writeData.String"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.7.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2/hpack",
          "product": "golang.org/x/net/http2/hpack",
          "programRoutines": [
            {
              "name": "Decoder.parseFieldLiteral"
            },
            {
              "name": "Decoder.readString"
            },
            {
              "name": "Decoder.DecodeFull"
            },
            {
              "name": "Decoder.Write"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.7.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Philippe Antoine (Catena cyber)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE 400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-25T11:09:48.448Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/57855"
        },
        {
          "url": "https://go.dev/cl/468135"
        },
        {
          "url": "https://go.dev/cl/468295"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2023-1571"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/"
        },
        {
          "url": "https://www.couchbase.com/alerts/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202311-09"
        }
      ],
      "title": "Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2022-41723",
    "datePublished": "2023-02-28T17:19:45.801Z",
    "dateReserved": "2022-09-28T17:00:06.610Z",
    "dateUpdated": "2025-05-05T16:12:28.159Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-39325 (GCVE-0-2023-39325)

Vulnerability from cvelistv5 – Published: 2023-10-11 21:15 – Updated: 2025-02-13 17:02

Title

HTTP/2 rapid reset can cause excessive work in net/http

Summary

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.

Severity

No CVSS data available.

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

References

43 references

URL	Tags
https://go.dev/issue/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://groups.google.com/g/golang-announce/c/iNN…
https://pkg.go.dev/vuln/GO-2023-2102
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://security.netapp.com/advisory/ntap-2023111…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://security.gentoo.org/glsa/202311-09
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…

Impacted products

2 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.20.10 (semver) Affected: 1.21.0-0 , < 1.21.3 (semver)
golang.org/x/net	golang.org/x/net/http2	Affected: 0 , < 0.17.0 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:02:06.746Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/issue/63417"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/534215"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/534235"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/vuln/GO-2023-2102"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231110-0008/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-09"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "http2serverConn.serve"
            },
            {
              "name": "http2serverConn.processHeaders"
            },
            {
              "name": "http2serverConn.upgradeRequest"
            },
            {
              "name": "http2serverConn.runHandler"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            },
            {
              "name": "http2Server.ServeConn"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.20.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.3",
              "status": "affected",
              "version": "1.21.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2",
          "product": "golang.org/x/net/http2",
          "programRoutines": [
            {
              "name": "serverConn.serve"
            },
            {
              "name": "serverConn.processHeaders"
            },
            {
              "name": "serverConn.upgradeRequest"
            },
            {
              "name": "serverConn.runHandler"
            },
            {
              "name": "Server.ServeConn"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.17.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-28T04:05:57.980Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/63417"
        },
        {
          "url": "https://go.dev/cl/534215"
        },
        {
          "url": "https://go.dev/cl/534235"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2023-2102"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231110-0008/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202311-09"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/"
        }
      ],
      "title": "HTTP/2 rapid reset can cause excessive work in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2023-39325",
    "datePublished": "2023-10-11T21:15:02.727Z",
    "dateReserved": "2023-07-27T17:05:55.188Z",
    "dateUpdated": "2025-02-13T17:02:50.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-44487 (GCVE-0-2023-44487)

Vulnerability from cvelistv5 – Published: 2023-10-10 00:00 – Updated: 2026-05-12 10:52

Summary

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-400 - Uncontrolled Resource Consumption

Assigner

mitre

References

173 references

URL	Tags
https://github.com/dotnet/core/blob/e4613450ea0da…
https://blog.cloudflare.com/technical-breakdown-h…
https://aws.amazon.com/security/security-bulletin…
https://cloud.google.com/blog/products/identity-s…
https://www.nginx.com/blog/http-2-rapid-reset-att…
https://cloud.google.com/blog/products/identity-s…
https://news.ycombinator.com/item?id=37831062
https://blog.cloudflare.com/zero-day-rapid-reset-…
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
https://github.com/envoyproxy/envoy/pull/30055
https://github.com/haproxy/haproxy/issues/2312
https://github.com/eclipse/jetty.project/issues/10679
https://forums.swift.org/t/swift-nio-http2-securi…
https://github.com/nghttp2/nghttp2/pull/1961
https://github.com/netty/netty/commit/58f75f665aa…
https://github.com/alibaba/tengine/issues/1872
https://github.com/apache/tomcat/tree/main/java/o…
https://news.ycombinator.com/item?id=37830987
https://news.ycombinator.com/item?id=37830998
https://github.com/caddyserver/caddy/issues/5877
https://www.bleepingcomputer.com/news/security/ne…
https://github.com/bcdannyboy/CVE-2023-44487
https://github.com/grpc/grpc-go/pull/6703
https://github.com/icing/mod_h2/blob/0a864782af0a…
https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
https://mailman.nginx.org/pipermail/nginx-devel/2…
https://my.f5.com/manage/s/article/K000137106
https://msrc.microsoft.com/blog/2023/10/microsoft…
https://bugzilla.proxmox.com/show_bug.cgi?id=4988
https://cgit.freebsd.org/ports/commit/?id=c64c329…
http://www.openwall.com/lists/oss-security/2023/10/10/7	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/10/6	mailing-list
https://seanmonstar.com/post/730794151136935936/h…
https://github.com/microsoft/CBL-Mariner/pull/6381
https://groups.google.com/g/golang-announce/c/iNN…
https://github.com/facebook/proxygen/pull/466
https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a…
https://github.com/micrictor/http2-rst-stream
https://edg.io/lp/blog/resets-leaks-ddos-and-the-…
https://openssf.org/blog/2023/10/10/http-2-rapid-…
https://github.com/h2o/h2o/security/advisories/GH…
https://github.com/h2o/h2o/pull/3291
https://github.com/nodejs/node/pull/50121
https://github.com/dotnet/announcements/issues/277
https://github.com/golang/go/issues/63417
https://github.com/advisories/GHSA-vx74-f528-fxqg
https://github.com/apache/trafficserver/pull/10564
https://msrc.microsoft.com/update-guide/vulnerabi…
https://tomcat.apache.org/security-10.html#Fixed_…
https://lists.apache.org/thread/5py8h42mxfsn8l1wy…
https://www.openwall.com/lists/oss-security/2023/…
https://www.haproxy.com/blog/haproxy-is-not-affec…
https://github.com/opensearch-project/data-preppe…
https://github.com/kubernetes/kubernetes/pull/121120
https://github.com/oqtane/oqtane.framework/discus…
https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
https://netty.io/news/2023/10/10/4-1-100-Final.html
https://www.cisa.gov/news-events/alerts/2023/10/1…
https://www.theregister.com/2023/10/10/http2_rapi…
https://blog.qualys.com/vulnerabilities-threat-re…
https://news.ycombinator.com/item?id=37837043
https://github.com/kazu-yamamoto/http2/issues/93
https://martinthomson.github.io/h2-stream-limits/…
https://github.com/kazu-yamamoto/http2/commit/f61…
https://github.com/apache/httpd/blob/afcdbeebbff4…
https://www.debian.org/security/2023/dsa-5522	vendor-advisory
https://www.debian.org/security/2023/dsa-5521	vendor-advisory
https://access.redhat.com/security/cve/cve-2023-44487
https://github.com/ninenines/cowboy/issues/1615
https://github.com/varnishcache/varnish-cache/iss…
https://github.com/tempesta-tech/tempesta/issues/1986
https://blog.vespa.ai/cve-2023-44487/
https://github.com/etcd-io/etcd/issues/16740
https://www.darkreading.com/cloud/internet-wide-z…
https://istio.io/latest/news/security/istio-secur…
https://github.com/junkurihara/rust-rpxy/issues/97
https://bugzilla.suse.com/show_bug.cgi?id=1216123
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://ubuntu.com/security/CVE-2023-44487
https://community.traefik.io/t/is-traefik-vulnera…
https://github.com/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/apache/httpd-site/pull/10
https://github.com/projectcontour/contour/pull/5826
https://github.com/linkerd/website/pull/1695/comm…
https://github.com/line/armeria/pull/5232
https://blog.litespeedtech.com/2023/10/11/rapid-r…
https://security.paloaltonetworks.com/CVE-2023-44487
https://github.com/akka/akka-http/issues/4323
https://github.com/openresty/openresty/issues/930
https://github.com/apache/apisix/issues/10320
https://github.com/Azure/AKS/issues/3947
https://github.com/Kong/kong/discussions/11741
https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
https://www.netlify.com/blog/netlify-successfully…
https://github.com/caddyserver/caddy/releases/tag…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/13/4	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/13/9	mailing-list
https://arstechnica.com/security/2023/10/how-ddos…
https://lists.w3.org/Archives/Public/ietf-http-wg…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.netapp.com/advisory/ntap-2023101…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/18/4	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/18/8	mailing-list
http://www.openwall.com/lists/oss-security/2023/10/19/6	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/10/20/8	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://www.debian.org/security/2023/dsa-5540	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://discuss.hashicorp.com/t/hcsec-2023-32-vau…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://www.debian.org/security/2023/dsa-5549	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2023/dsa-5558	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.gentoo.org/glsa/202311-09	vendor-advisory
https://www.debian.org/security/2023/dsa-5570	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…
https://security.netapp.com/advisory/ntap-2024062…
https://security.netapp.com/advisory/ntap-2024062…
https://github.com/grpc/grpc/releases/tag/v1.59.2
https://sec.cloudapps.cisco.com/security/center/c…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_transferred
https://www.vicarius.io/vsociety/posts/rapid-rese…
http://www.openwall.com/lists/oss-security/2025/08/13/6
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

6 products

Vendor	Product	Version
ietf	http	Affected: 2.0 cpe:2.3:a:ietf:http:2.0:::::::*
Siemens	RUGGEDCOM APE1808	Affected: 0 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SINEC NMS	Affected: 0 , < V3.0 (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ietf:http:2.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "http",
            "vendor": "ietf",
            "versions": [
              {
                "status": "affected",
                "version": "2.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-44487",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-23T20:34:21.334116Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2023-10-10",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:35.187Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2023-10-10T00:00:00.000Z",
            "value": "CVE-2023-44487 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:08:27.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=37831062"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/envoyproxy/envoy/pull/30055"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/haproxy/haproxy/issues/2312"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/eclipse/jetty.project/issues/10679"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/nghttp2/nghttp2/pull/1961"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/alibaba/tengine/issues/1872"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=37830987"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=37830998"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/caddyserver/caddy/issues/5877"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/bcdannyboy/CVE-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/grpc/grpc-go/pull/6703"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://my.f5.com/manage/s/article/K000137106"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/microsoft/CBL-Mariner/pull/6381"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/facebook/proxygen/pull/466"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/micrictor/http2-rst-stream"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/h2o/h2o/pull/3291"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/nodejs/node/pull/50121"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/dotnet/announcements/issues/277"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/golang/go/issues/63417"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/advisories/GHSA-vx74-f528-fxqg"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/trafficserver/pull/10564"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/10/10/6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/opensearch-project/data-prepper/issues/3474"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/kubernetes/kubernetes/pull/121120"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/oqtane/oqtane.framework/discussions/3367"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://netty.io/news/2023/10/10/4-1-100-Final.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=37837043"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/kazu-yamamoto/http2/issues/93"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113"
          },
          {
            "name": "DSA-5522",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5522"
          },
          {
            "name": "DSA-5521",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5521"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ninenines/cowboy/issues/1615"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/varnishcache/varnish-cache/issues/3996"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/tempesta-tech/tempesta/issues/1986"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.vespa.ai/cve-2023-44487/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/etcd-io/etcd/issues/16740"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://istio.io/latest/news/security/istio-security-2023-004/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/junkurihara/rust-rpxy/issues/97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/CVE-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/httpd-site/pull/10"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/projectcontour/contour/pull/5826"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/line/armeria/pull/5232"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/akka/akka-http/issues/4323"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/openresty/openresty/issues/930"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/apisix/issues/10320"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/Azure/AKS/issues/3947"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/Kong/kong/discussions/11741"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5"
          },
          {
            "name": "[debian-lts-announce] 20231013 [SECURITY] [DLA 3617-1] tomcat9 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
          },
          {
            "name": "[oss-security] 20231013 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/13/4"
          },
          {
            "name": "[oss-security] 20231013 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/13/9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html"
          },
          {
            "name": "FEDORA-2023-ed2642fd58",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/"
          },
          {
            "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3621-1] nghttp2 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231016-0001/"
          },
          {
            "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3617-2] tomcat9 regression update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html"
          },
          {
            "name": "[oss-security] 20231018 Vulnerability in Jenkins",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/18/4"
          },
          {
            "name": "[oss-security] 20231018 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/18/8"
          },
          {
            "name": "[oss-security] 20231019 CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/19/6"
          },
          {
            "name": "FEDORA-2023-54fadada12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/"
          },
          {
            "name": "FEDORA-2023-5ff7bf1dd8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/"
          },
          {
            "name": "[oss-security] 20231020 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/10/20/8"
          },
          {
            "name": "FEDORA-2023-17efd3f2cd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/"
          },
          {
            "name": "FEDORA-2023-d5030c983c",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/"
          },
          {
            "name": "FEDORA-2023-0259c3f26f",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/"
          },
          {
            "name": "FEDORA-2023-2a9214af5f",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/"
          },
          {
            "name": "FEDORA-2023-e9c04d81c1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/"
          },
          {
            "name": "FEDORA-2023-f66fc0f62a",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/"
          },
          {
            "name": "FEDORA-2023-4d2fd884ea",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/"
          },
          {
            "name": "FEDORA-2023-b2c50535cb",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/"
          },
          {
            "name": "FEDORA-2023-fe53e13b5b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/"
          },
          {
            "name": "FEDORA-2023-4bf641255e",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/"
          },
          {
            "name": "[debian-lts-announce] 20231030 [SECURITY] [DLA 3641-1] jetty9 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html"
          },
          {
            "name": "DSA-5540",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5540"
          },
          {
            "name": "[debian-lts-announce] 20231031 [SECURITY] [DLA 3638-1] h2o security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715"
          },
          {
            "name": "FEDORA-2023-1caffb88af",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/"
          },
          {
            "name": "FEDORA-2023-3f70b8d406",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/"
          },
          {
            "name": "FEDORA-2023-7b52921cae",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/"
          },
          {
            "name": "FEDORA-2023-7934802344",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/"
          },
          {
            "name": "FEDORA-2023-dbe64661af",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/"
          },
          {
            "name": "FEDORA-2023-822aab0a5a",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
          },
          {
            "name": "[debian-lts-announce] 20231105 [SECURITY] [DLA 3645-1] trafficserver security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html"
          },
          {
            "name": "DSA-5549",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5549"
          },
          {
            "name": "FEDORA-2023-c0c6a91330",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/"
          },
          {
            "name": "FEDORA-2023-492b7be466",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/"
          },
          {
            "name": "DSA-5558",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5558"
          },
          {
            "name": "[debian-lts-announce] 20231119 [SECURITY] [DLA 3656-1] netty security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html"
          },
          {
            "name": "GLSA-202311-09",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-09"
          },
          {
            "name": "DSA-5570",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5570"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0007/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240621-0007/"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/13/6"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC NMS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T10:52:23.784Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-832273.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784301.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-07T20:05:34.376Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73"
        },
        {
          "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/"
        },
        {
          "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/"
        },
        {
          "url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack"
        },
        {
          "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/"
        },
        {
          "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/"
        },
        {
          "url": "https://news.ycombinator.com/item?id=37831062"
        },
        {
          "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/"
        },
        {
          "url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack"
        },
        {
          "url": "https://github.com/envoyproxy/envoy/pull/30055"
        },
        {
          "url": "https://github.com/haproxy/haproxy/issues/2312"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues/10679"
        },
        {
          "url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764"
        },
        {
          "url": "https://github.com/nghttp2/nghttp2/pull/1961"
        },
        {
          "url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61"
        },
        {
          "url": "https://github.com/alibaba/tengine/issues/1872"
        },
        {
          "url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2"
        },
        {
          "url": "https://news.ycombinator.com/item?id=37830987"
        },
        {
          "url": "https://news.ycombinator.com/item?id=37830998"
        },
        {
          "url": "https://github.com/caddyserver/caddy/issues/5877"
        },
        {
          "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/"
        },
        {
          "url": "https://github.com/bcdannyboy/CVE-2023-44487"
        },
        {
          "url": "https://github.com/grpc/grpc-go/pull/6703"
        },
        {
          "url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244"
        },
        {
          "url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0"
        },
        {
          "url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html"
        },
        {
          "url": "https://my.f5.com/manage/s/article/K000137106"
        },
        {
          "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/"
        },
        {
          "url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988"
        },
        {
          "url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9"
        },
        {
          "name": "[oss-security] 20231010 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/10/7"
        },
        {
          "name": "[oss-security] 20231010 CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/10/6"
        },
        {
          "url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected"
        },
        {
          "url": "https://github.com/microsoft/CBL-Mariner/pull/6381"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo"
        },
        {
          "url": "https://github.com/facebook/proxygen/pull/466"
        },
        {
          "url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088"
        },
        {
          "url": "https://github.com/micrictor/http2-rst-stream"
        },
        {
          "url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve"
        },
        {
          "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/"
        },
        {
          "url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf"
        },
        {
          "url": "https://github.com/h2o/h2o/pull/3291"
        },
        {
          "url": "https://github.com/nodejs/node/pull/50121"
        },
        {
          "url": "https://github.com/dotnet/announcements/issues/277"
        },
        {
          "url": "https://github.com/golang/go/issues/63417"
        },
        {
          "url": "https://github.com/advisories/GHSA-vx74-f528-fxqg"
        },
        {
          "url": "https://github.com/apache/trafficserver/pull/10564"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487"
        },
        {
          "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14"
        },
        {
          "url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/10/10/6"
        },
        {
          "url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487"
        },
        {
          "url": "https://github.com/opensearch-project/data-prepper/issues/3474"
        },
        {
          "url": "https://github.com/kubernetes/kubernetes/pull/121120"
        },
        {
          "url": "https://github.com/oqtane/oqtane.framework/discussions/3367"
        },
        {
          "url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p"
        },
        {
          "url": "https://netty.io/news/2023/10/10/4-1-100-Final.html"
        },
        {
          "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
        },
        {
          "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/"
        },
        {
          "url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack"
        },
        {
          "url": "https://news.ycombinator.com/item?id=37837043"
        },
        {
          "url": "https://github.com/kazu-yamamoto/http2/issues/93"
        },
        {
          "url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html"
        },
        {
          "url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1"
        },
        {
          "url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113"
        },
        {
          "name": "DSA-5522",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5522"
        },
        {
          "name": "DSA-5521",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5521"
        },
        {
          "url": "https://access.redhat.com/security/cve/cve-2023-44487"
        },
        {
          "url": "https://github.com/ninenines/cowboy/issues/1615"
        },
        {
          "url": "https://github.com/varnishcache/varnish-cache/issues/3996"
        },
        {
          "url": "https://github.com/tempesta-tech/tempesta/issues/1986"
        },
        {
          "url": "https://blog.vespa.ai/cve-2023-44487/"
        },
        {
          "url": "https://github.com/etcd-io/etcd/issues/16740"
        },
        {
          "url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event"
        },
        {
          "url": "https://istio.io/latest/news/security/istio-security-2023-004/"
        },
        {
          "url": "https://github.com/junkurihara/rust-rpxy/issues/97"
        },
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803"
        },
        {
          "url": "https://ubuntu.com/security/CVE-2023-44487"
        },
        {
          "url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125"
        },
        {
          "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3"
        },
        {
          "url": "https://github.com/apache/httpd-site/pull/10"
        },
        {
          "url": "https://github.com/projectcontour/contour/pull/5826"
        },
        {
          "url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632"
        },
        {
          "url": "https://github.com/line/armeria/pull/5232"
        },
        {
          "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/"
        },
        {
          "url": "https://security.paloaltonetworks.com/CVE-2023-44487"
        },
        {
          "url": "https://github.com/akka/akka-http/issues/4323"
        },
        {
          "url": "https://github.com/openresty/openresty/issues/930"
        },
        {
          "url": "https://github.com/apache/apisix/issues/10320"
        },
        {
          "url": "https://github.com/Azure/AKS/issues/3947"
        },
        {
          "url": "https://github.com/Kong/kong/discussions/11741"
        },
        {
          "url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487"
        },
        {
          "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/"
        },
        {
          "url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5"
        },
        {
          "name": "[debian-lts-announce] 20231013 [SECURITY] [DLA 3617-1] tomcat9 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html"
        },
        {
          "name": "[oss-security] 20231013 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/13/4"
        },
        {
          "name": "[oss-security] 20231013 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/13/9"
        },
        {
          "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/"
        },
        {
          "url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html"
        },
        {
          "name": "FEDORA-2023-ed2642fd58",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/"
        },
        {
          "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/"
        },
        {
          "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3621-1] nghttp2 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231016-0001/"
        },
        {
          "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3617-2] tomcat9 regression update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html"
        },
        {
          "name": "[oss-security] 20231018 Vulnerability in Jenkins",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/18/4"
        },
        {
          "name": "[oss-security] 20231018 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/18/8"
        },
        {
          "name": "[oss-security] 20231019 CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/19/6"
        },
        {
          "name": "FEDORA-2023-54fadada12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/"
        },
        {
          "name": "FEDORA-2023-5ff7bf1dd8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/"
        },
        {
          "name": "[oss-security] 20231020 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/10/20/8"
        },
        {
          "name": "FEDORA-2023-17efd3f2cd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/"
        },
        {
          "name": "FEDORA-2023-d5030c983c",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/"
        },
        {
          "name": "FEDORA-2023-0259c3f26f",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/"
        },
        {
          "name": "FEDORA-2023-2a9214af5f",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/"
        },
        {
          "name": "FEDORA-2023-e9c04d81c1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/"
        },
        {
          "name": "FEDORA-2023-f66fc0f62a",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/"
        },
        {
          "name": "FEDORA-2023-4d2fd884ea",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/"
        },
        {
          "name": "FEDORA-2023-b2c50535cb",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/"
        },
        {
          "name": "FEDORA-2023-fe53e13b5b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/"
        },
        {
          "name": "FEDORA-2023-4bf641255e",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/"
        },
        {
          "name": "[debian-lts-announce] 20231030 [SECURITY] [DLA 3641-1] jetty9 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html"
        },
        {
          "name": "DSA-5540",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5540"
        },
        {
          "name": "[debian-lts-announce] 20231031 [SECURITY] [DLA 3638-1] h2o security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html"
        },
        {
          "url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715"
        },
        {
          "name": "FEDORA-2023-1caffb88af",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/"
        },
        {
          "name": "FEDORA-2023-3f70b8d406",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/"
        },
        {
          "name": "FEDORA-2023-7b52921cae",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/"
        },
        {
          "name": "FEDORA-2023-7934802344",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/"
        },
        {
          "name": "FEDORA-2023-dbe64661af",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/"
        },
        {
          "name": "FEDORA-2023-822aab0a5a",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
        },
        {
          "name": "[debian-lts-announce] 20231105 [SECURITY] [DLA 3645-1] trafficserver security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html"
        },
        {
          "name": "DSA-5549",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5549"
        },
        {
          "name": "FEDORA-2023-c0c6a91330",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/"
        },
        {
          "name": "FEDORA-2023-492b7be466",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/"
        },
        {
          "name": "DSA-5558",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5558"
        },
        {
          "name": "[debian-lts-announce] 20231119 [SECURITY] [DLA 3656-1] netty security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html"
        },
        {
          "name": "GLSA-202311-09",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202311-09"
        },
        {
          "name": "DSA-5570",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5570"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0007/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240621-0007/"
        },
        {
          "url": "https://github.com/grpc/grpc/releases/tag/v1.59.2"
        },
        {
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-44487",
    "datePublished": "2023-10-10T00:00:00.000Z",
    "dateReserved": "2023-09-29T00:00:00.000Z",
    "dateUpdated": "2026-05-12T10:52:23.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2023_6251

CVE-2022-41723 (GCVE-0-2022-41723)

CVE-2023-39325 (GCVE-0-2023-39325)

CVE-2023-44487 (GCVE-0-2023-44487)

Tags

Sightings

Nomenclature