RHEA-2023:3352
Vulnerability from csaf_redhat - Published: 2023-05-30 15:37 - Updated: 2026-08-12 21:25Summary
Red Hat Enhancement Advisory: OpenShift Virtualization 4.11.4 Images
Severity
Moderate
Notes
Topic: Red Hat OpenShift Virtualization release 4.11.4 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization 4.11.4 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
5.3 (Medium)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release 4.11.4 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization 4.11.4 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHEA-2023:3352",
"url": "https://access.redhat.com/errata/RHEA-2023:3352"
},
{
"category": "external",
"summary": "2078545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2078545"
},
{
"category": "external",
"summary": "2091976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091976"
},
{
"category": "external",
"summary": "2152534",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2152534"
},
{
"category": "external",
"summary": "2167509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167509"
},
{
"category": "external",
"summary": "2169272",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169272"
},
{
"category": "external",
"summary": "2176032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2176032"
},
{
"category": "external",
"summary": "2176787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2176787"
},
{
"category": "external",
"summary": "2189460",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2189460"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhea-2023_3352.json"
}
],
"title": "Red Hat Enhancement Advisory: OpenShift Virtualization 4.11.4 Images",
"tracking": {
"current_release_date": "2026-08-12T21:25:27+00:00",
"generator": {
"date": "2026-08-12T21:25:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHEA-2023:3352",
"initial_release_date": "2023-05-30T15:37:37+00:00",
"revision_history": [
{
"date": "2023-05-30T15:37:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-05-30T15:37:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-12T21:25:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "CNV 4.11 for RHEL 8",
"product": {
"name": "CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.11::el8"
}
}
}
],
"category": "product_family",
"name": "OpenShift Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"product": {
"name": "container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"product_id": "container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/checkup-framework\u0026tag=v4.11.4-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product": {
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product_id": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver-rhel8\u0026tag=v4.11.4-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product": {
"name": "container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product_id": "container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver\u0026tag=v4.11.4-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"product_id": "container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin\u0026tag=v4.11.4-16"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-copy-template\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-datavolume\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-operator\u0026tag=v4.11.4-5"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status\u0026tag=v4.11.4-20"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64",
"product": {
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64",
"product_id": "container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/vm-network-latency-checkup\u0026tag=v4.11.4-7"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64"
},
"product_reference": "container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64"
},
"product_reference": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64"
},
"product_reference": "container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64"
},
"product_reference": "container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-41717",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2023-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2161274"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Within Red Hat OpenShift Container Platform, the grafana container is listed as will not fix. Since OCP 4.10, Grafana itself is not shipped and the Grafana web server is protected behind an OAuth proxy server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-41717"
},
{
"category": "external",
"summary": "RHBZ#2161274",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2161274"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-41717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41717"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41717",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41717"
},
{
"category": "external",
"summary": "https://go.dev/cl/455635",
"url": "https://go.dev/cl/455635"
},
{
"category": "external",
"summary": "https://go.dev/cl/455717",
"url": "https://go.dev/cl/455717"
},
{
"category": "external",
"summary": "https://go.dev/issue/56350",
"url": "https://go.dev/issue/56350"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ",
"url": "https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2022-1144",
"url": "https://pkg.go.dev/vuln/GO-2022-1144"
}
],
"release_date": "2022-11-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-30T15:37:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2023:3352"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2bcd239de1b16eb64ea314dbfe4c965ed2ff6681b092423146ce1f9fba5dbd8d_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:5eca89e6ac055a448b2e2150698c5fa2e66f8026a0a5da28defcea6c4376ecaa_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:83bf9af49dc07256b50e13ad0ecc7cd9880b7c40e2b2061bbe125c0e9d9e2e6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:90ecca3593937aff5be9df15281bc785db64389268fbe38f6740c0dfbc53dc23_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:bb438a4542cbfed7e678dac1572ec5638b9b37fb0e5e2c95da975991dd4f05e6_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:1c5393262a8eb9d449f2e803ba992429ca28d35d82813c43f1e2ae9cb62e11d7_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:7f287881ac2622d448495589ce866afa23e8938af5a62c0a055076275b8a6361_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:48b8fe110deab5d921ac15dd554aee80cc971205c6fdd09169e64572fa6f4b50_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:0253e34b988af03f387c5531646996e94c6d3c06ad8bdc03ade5343570254337_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:e99341b0b59811648d4e4ae44a47359cc3c588a2f8da0bfa75d68f3e8568ede1_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:ffd5c41704e6dbdf7ba4dc5128f0f9896f31ab41994924b7db957d211113aef5_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:471824fc8548ce1530b1490df4c51bda7228b10bd9f63ac1b596e9a8a565479e_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:3730fa5da224ed4ebaa44e7e1fa694a15c8469e6b318a6d9136f17d9158252a5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…