rhsa-2024_0530
Vulnerability from csaf_redhat
Published
2024-01-25 18:10
Modified
2024-12-17 22:31
Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update

Notes

Topic
An update is now available for the Red Hat build of Cryostat 2 on RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
An update is now available for the Red Hat build of Cryostat 2 on RHEL 8. Security Fix(es): * parsson: Denial of Service due to large number parsing (CVE-2023-4043) * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for the Red Hat build of Cryostat 2 on RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for the Red Hat build of Cryostat 2 on RHEL 8.\n\nSecurity Fix(es):\n\n* parsson: Denial of Service due to large number parsing (CVE-2023-4043)\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:0530",
        "url": "https://access.redhat.com/errata/RHSA-2024:0530"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2253330",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253330"
      },
      {
        "category": "external",
        "summary": "2254594",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254594"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0530.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
    "tracking": {
      "current_release_date": "2024-12-17T22:31:42+00:00",
      "generator": {
        "date": "2024-12-17T22:31:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2024:0530",
      "initial_release_date": "2024-01-25T18:10:36+00:00",
      "revision_history": [
        {
          "date": "2024-01-25T18:10:36+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-01-25T18:10:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-17T22:31:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 2 on RHEL 8",
                "product": {
                  "name": "Cryostat 2 on RHEL 8",
                  "product_id": "8Base-Cryostat-2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:2::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
                  "product_id": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-grafana-dashboard-rhel8\u0026tag=2.4.0-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
                  "product_id": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-reports-rhel8\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
                  "product_id": "cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-rhel8\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
                  "product_id": "cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-operator-bundle\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
                  "product_id": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-rhel8-operator\u0026tag=2.4.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64",
                "product": {
                  "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64",
                  "product_id": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925?arch=amd64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/jfr-datasource-rhel8\u0026tag=2.4.0-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
                  "product_id": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-grafana-dashboard-rhel8\u0026tag=2.4.0-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
                  "product_id": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-reports-rhel8\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
                  "product_id": "cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-rhel8\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
                  "product_id": "cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-operator-bundle\u0026tag=2.4.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
                "product": {
                  "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
                  "product_id": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/cryostat-rhel8-operator\u0026tag=2.4.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
                "product": {
                  "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
                  "product_id": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82?arch=arm64\u0026repository_url=registry.redhat.io/cryostat-tech-preview/jfr-datasource-rhel8\u0026tag=2.4.0-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64"
        },
        "product_reference": "cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64"
        },
        "product_reference": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64 as a component of Cryostat 2 on RHEL 8",
          "product_id": "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
        },
        "product_reference": "cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64",
        "relates_to_product_reference": "8Base-Cryostat-2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-4043",
      "cwe": {
        "id": "CWE-834",
        "name": "Excessive Iteration"
      },
      "discovery_date": "2023-12-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2254594"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Eclipse Parsson library when processing untrusted source content. This issue may cause a Denial of Service (DoS) due to built-in support for parsing numbers with a large scale, and some cases where processing a large number may take much more time than expected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "parsson: Denial of Service due to large number parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this as an important impact since one needs to process untrusted and if there is no sanitization a Denial of Service (DoS) may happen.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-4043"
        },
        {
          "category": "external",
          "summary": "RHBZ#2254594",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254594"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-4043",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-4043"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4043",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4043"
        }
      ],
      "release_date": "2023-11-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-01-25T18:10:36+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:0530"
        },
        {
          "category": "workaround",
          "details": "Avoid processing untrusted sources content in order to minimize the chance for Denial of Service attack.",
          "product_ids": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "parsson: Denial of Service due to large number parsing"
    },
    {
      "cve": "CVE-2023-39326",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-12-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2253330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
          "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
          "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-39326"
        },
        {
          "category": "external",
          "summary": "RHBZ#2253330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-39326",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-39326"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39326",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39326"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2023-2382",
          "url": "https://pkg.go.dev/vuln/GO-2023-2382"
        }
      ],
      "release_date": "2023-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-01-25T18:10:36+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:0530"
        },
        {
          "category": "workaround",
          "details": "No mitigation is available for this flaw.",
          "product_ids": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:3dfe913cbfc5aa0ec61d4273b4be518c28ac27f793b771106213cbec7bd33191_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:ee17ca52bd8d4184c5d0b938ef2954997b7dff60158663ffc9f7a21814bd4c9a_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:34b69e9d113e5c4f66a9d11dba0a32e995b971cdaf8385c5fe793b97e2ebc12b_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-operator-bundle@sha256:6648c9a1cef7c671209875b0d70cf64cd642c063a0dc925a42a24b839864d606_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:051fabe2bbda1c99fbaa07100f14784df477074797322c68b4f9e5d690728580_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-reports-rhel8@sha256:a7ab8268a14b99b718cd4146b6ecd10b7f50b44a7a317a59206792ba07cc0463_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:586da55705c6edf6003acf65cb9ef90706941436e51e3999d57defcb266d89b6_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8-operator@sha256:d8003a6fa8936db8577a9509440beb5bc2a2524cee0f60b6f3f6b099f1151563_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:0ad68b37907dd3f36739a64b7251a65c441465a8e4523a9f348e9b5a223c2873_amd64",
            "8Base-Cryostat-2:cryostat-tech-preview/cryostat-rhel8@sha256:12f582e13a67d70b5c1a2c700a8f1b431dfa327b369b8d52321db5a89fdf9f03_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:39b03d257bb1b5bcf041f90b421dfbf4c3f67ad0a1245df84d85675d94b67c82_arm64",
            "8Base-Cryostat-2:cryostat-tech-preview/jfr-datasource-rhel8@sha256:94c0642a73d2f49d855a577c6ea91953e9a36424ee2af91584aa964622fbc925_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.