All products

Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-cnf

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review. golang.org/x/netOpenShift API for Data Protection/oadp/oadp-rhel8-operator GoRed Hat Medium Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Improper handling of special tags within script contexts in html/templateCVE-2023-39319 · GO-2023-2043 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator GoRed Hat Medium Fix reported
Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Denial of service via chunk extensions in net/httpCVE-2023-39326 · GO-2023-2382 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Panic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321 · GO-2023-2044 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported