{"id":"EUVD-2023-2635","revision":"2a2e7cdc3e4145fca04d406887f2c827","records":[{"revision":"2a2e7cdc3e4145fca04d406887f2c827","observedAt":"2026-11-04T21:55:51.028+00:00","statement":{"source":"euvd","id":"EUVD-2023-2635","aliases":["CVE-2023-39325","GHSA-4374-p667-p6c8"],"title":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting …","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[],"references":["https://go.dev/issue/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://pkg.go.dev/vuln/GO-2023-2102","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://security.netapp.com/advisory/ntap-20231110-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2635","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 11, 2023, 9:15:02 PM","dateUpdated":"Feb 13, 2025, 5:02:50 PM"},"relatedAdvisories":[{"id":"RHSA-2023:6243","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7322","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13326-1","title":"go1.20-1.20.10-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5952","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update","vulnerabilityIds":["CVE-2021-32760","CVE-2023-26054","CVE-2023-39325"]},{"id":"RHSA-2023:6116","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.14 security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7478","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7704","title":"Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0941","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:10523","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.42 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325"]},{"id":"RHSA-2023:6129","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.19 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5967","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2026:11819-1","title":"fake-gcs-server-1.56.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5866","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4068-1","title":"Security update for go1.20","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6031","title":"Red Hat Security Advisory: Cryostat security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-29406","CVE-2023-29409","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5971","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (director-operator) security update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0269","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-44487","CVE-2023-45287"]},{"id":"RHSA-2024:1449","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.5 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-47108"]},{"id":"RHSA-2023:6279","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.11.5","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325"]},{"id":"RHSA-2023:7215","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.2.12","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2024:3343-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2024:0306","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6217","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:4118","title":"Red Hat Security Advisory: Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142","CVE-2023-49569"]},{"id":"RHSA-2023:6115","title":"Red Hat Security Advisory: OpenShift API for Data Protection security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7607","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5980","title":"Red Hat Security Advisory: Satellite 6.11.5.6 async security update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7288","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5009","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update","vulnerabilityIds":["CVE-2022-27664","CVE-2023-2727","CVE-2023-2728","CVE-2023-3089","CVE-2023-3153","CVE-2023-3978","CVE-2023-29409","CVE-2023-29824","CVE-2023-37788","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7315","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.3 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6040","title":"Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5864","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:3927","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 container image security, and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-22195"]},{"id":"RHEA-2024:1870","title":"Red Hat Enhancement Advisory: Advisory for publishing Helm 3.13.2 GA release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7602","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.25 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"SUSE-SU-2024:3097-1","title":"Security update for kubernetes1.28","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"SUSE-SU-2024:3344-1","title":"Security update for kubernetes1.25","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2024:1052","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.51 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:7831","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.7 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108"]},{"id":"RHSA-2023:7604","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.25 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5717","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.52 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7515","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.0 security update","vulnerabilityIds":["CVE-2023-3676","CVE-2023-3955","CVE-2023-39325"]},{"id":"RHSA-2023:7469","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.4 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:6782","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7475","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.24 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5979","title":"Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6894","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.44 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6077","title":"Red Hat Security Advisory: toolbox security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6839","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6061","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.12.1 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6145","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.9 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7599","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.5 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHBA-2023:7586","title":"Red Hat Bug Fix Advisory: LVMS 4.13.z Bug Fix and Enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0484","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.31 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5005","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7479","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHBA-2023:6109","title":"Red Hat Bug Fix Advisory: MTV 2.4.3 Images","vulnerabilityIds":["CVE-2022-32190","CVE-2022-41723","CVE-2022-41724","CVE-2022-41725","CVE-2023-3978","CVE-2023-24534","CVE-2023-24536","CVE-2023-24537","CVE-2023-24538","CVE-2023-24539","CVE-2023-29400","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7345","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.9.3 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5865","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6817","title":"Red Hat Security Advisory: OpenShift Virtualization 4.14.0 Images security and bug fix update","vulnerabilityIds":["CVE-2021-20329","CVE-2022-41724","CVE-2022-41725","CVE-2023-25153","CVE-2023-25173","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6846","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.22 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13506-1","title":"traefik-2.10.7-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45283","CVE-2023-45284","CVE-2023-47106","CVE-2023-47124","CVE-2023-47633"]},{"id":"RHSA-2023:6788","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6048","title":"Red Hat Security Advisory: ACS 4.2 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5976","title":"Red Hat Security Advisory: Service Telemetry Framework 1.5.2 security update","vulnerabilityIds":["CVE-2022-41724","CVE-2023-24532","CVE-2023-24534","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7323","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update","vulnerabilityIds":["CVE-2023-30551","CVE-2023-39325"]},{"id":"RHSA-2023:7690","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.55 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5738","title":"Red Hat Security Advisory: go-toolset and golang security and bug fix update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6240","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13 low-latency extras security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"WID-SEC-W-2023-3146","title":"IBM MQ Operator and Queue manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-4641","CVE-2023-44487","CVE-2023-43804","CVE-2023-4016","CVE-2023-3978","CVE-2023-39325","CVE-2023-39319","CVE-2023-39318","CVE-2023-29409","CVE-2023-25173","CVE-2023-25153","CVE-2022-41723","CVE-2022-41717","CVE-2022-31030","CVE-2022-23471"]},{"id":"RHSA-2023:5867","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6143","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 CNF vRAN extras security update","vulnerabilityIds":["CVE-2023-30841","CVE-2023-39325"]},{"id":"RHSA-2023:6276","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.42 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6271","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.53 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7470","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.4 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:6202","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.8 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2023:0360-1","title":"Security update for go1.21","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39320","CVE-2023-39321","CVE-2023-39322","CVE-2023-39323","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5895","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.40 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5970","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7201","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-45287","CVE-2023-48795"]},{"id":"RHSA-2024:0485","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update","vulnerabilityIds":["CVE-2022-32190","CVE-2022-41723","CVE-2023-3978","CVE-2023-6596","CVE-2023-39325"]},{"id":"RHSA-2023:5809","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2.2 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:6755","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-6104","CVE-2024-24789","CVE-2024-28176","CVE-2024-28863","CVE-2024-29180","CVE-2024-37890","CVE-2024-41818"]},{"id":"WID-SEC-W-2023-2723","title":"Red Hat Satellite: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5672","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.17 bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-3153","CVE-2023-39325"]},{"id":"RHSA-2023:7741","title":"Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update","vulnerabilityIds":["CVE-2023-1387","CVE-2023-1410","CVE-2023-2183","CVE-2023-2801","CVE-2023-39325","CVE-2023-44487"]},{"id":"WID-SEC-W-2025-0001","title":"IBM DB2: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-32740","CVE-2021-41186","CVE-2022-0759","CVE-2022-24795","CVE-2022-31163","CVE-2023-39325","CVE-2023-41993","CVE-2023-45283","CVE-2023-45288","CVE-2023-6597","CVE-2024-0406","CVE-2024-20918","CVE-2024-20952","CVE-2024-2398","CVE-2024-24786","CVE-2024-27281","CVE-2024-2961","CVE-2024-29857","CVE-2024-33599","CVE-2024-33883","CVE-2024-37370","CVE-2024-37371","CVE-2024-37890","CVE-2024-39338","CVE-2024-4068","CVE-2024-41110","CVE-2024-41123","CVE-2024-41946","CVE-2024-45296","CVE-2024-45491","CVE-2024-45590","CVE-2024-47220","CVE-2024-47554","CVE-2024-6119","CVE-2024-6345"]},{"id":"RHSA-2023:6118","title":"Red Hat Security Advisory: OpenShift API for Data Protection security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0059","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.56 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7682","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.6 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142"]},{"id":"SUSE-SU-2023:4469-1","title":"Security update for go1.21-openssl","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39320","CVE-2023-39321","CVE-2023-39322","CVE-2023-39323","CVE-2023-39325","CVE-2023-44487","CVE-2023-45283","CVE-2023-45284"]},{"id":"RHSA-2023:7474","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.24 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6122","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4069-1","title":"Security update for go1.21","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:5669","title":"Red Hat Bug Fix Advisory: OpenShift Compliance Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5933","title":"Red Hat Security Advisory: Openshift Secondary Scheduler Operator 1.1.3 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7481","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5835","title":"Red Hat Security Advisory: rhc-worker-script enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7699","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1572","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.54 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13376-1","title":"cmctl-1.13.2-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2025:1116","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.55  bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-6597","CVE-2023-39325","CVE-2024-6104","CVE-2024-45338"]},{"id":"RHSA-2023:5719","title":"Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2024:13327-1","title":"go1.21-1.21.3-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7610","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-46136"]},{"id":"RHSA-2023:6044","title":"Red Hat Security Advisory: Cost Management security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7827","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6179","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0642","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.11 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:5974","title":"Red Hat Security Advisory: Network Observability security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6837","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7521","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1765","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.21 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-24786","CVE-2024-26602"]},{"id":"RHSA-2023:6130","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.19 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHSA-2023:5982","title":"Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-41717","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0273","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.9 Images security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:14076-1","title":"traefik2-2.11.5-1.1 on GA media","vulnerabilityIds":["CVE-2022-23469","CVE-2022-41717","CVE-2022-41724","CVE-2022-46153","CVE-2023-24534","CVE-2023-29013","CVE-2023-39325","CVE-2023-45283","CVE-2023-45284","CVE-2023-45288","CVE-2023-47106","CVE-2023-47124","CVE-2023-47633","CVE-2024-24788","CVE-2024-28869"]},{"id":"RHSA-2024:0946","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6787","title":"Red Hat Security Advisory: Network Observability security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5950","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.2.11 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5721","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6893","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.44 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0954","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325","CVE-2023-48795"]},{"id":"RHBA-2023:6863","title":"Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6172","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","vulnerabilityIds":["CVE-2020-7692","CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-27903","CVE-2023-27904","CVE-2023-39325"]},{"id":"RHSA-2023:6125","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.41 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6841","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:4631","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.15.0 release","vulnerabilityIds":["CVE-2022-3064","CVE-2022-21698","CVE-2022-28948","CVE-2022-46175","CVE-2023-6378","CVE-2023-39325","CVE-2023-41080","CVE-2023-44487","CVE-2023-45288","CVE-2023-45648"]},{"id":"RHBA-2023:6078","title":"Red Hat Bug Fix Advisory: MTV 2.5.2 Images","vulnerabilityIds":["CVE-2022-41723","CVE-2023-26125","CVE-2023-26144","CVE-2023-29401","CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4472-1","title":"Security update for go1.20-openssl","vulnerabilityIds":["CVE-2023-39323","CVE-2023-39325","CVE-2023-44487","CVE-2023-45283","CVE-2023-45284"]},{"id":"RHSA-2023:6042","title":"Red Hat Security Advisory: Self Node Remediation Operator 0.5.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0741","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update","vulnerabilityIds":["CVE-2022-3064","CVE-2023-39325","CVE-2023-47108","CVE-2023-49568","CVE-2023-49569","CVE-2024-0793"]},{"id":"RHSA-2023:5851","title":"Red Hat Security Advisory: RHACS 4.1 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6220","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.1 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5965","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:7585","title":"Red Hat Bug Fix Advisory: LVMS 4.12.z bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"SUSE-SU-2024:3341-1","title":"Security update for kubernetes1.23","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2023:6248","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.8 Images security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0777","title":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-2976","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-35116","CVE-2023-37946","CVE-2023-37947","CVE-2023-39325","CVE-2023-40336","CVE-2023-40337","CVE-2023-40338","CVE-2023-40339","CVE-2023-40341","CVE-2023-44487"]},{"id":"RHSA-2023:6251","title":"Red Hat Security Advisory: OpenShift Virtualization 4.11.7 Images security and bug fix update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6269","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.12.1","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6039","title":"Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6171","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update","vulnerabilityIds":["CVE-2022-1471","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-27903","CVE-2023-27904","CVE-2023-39325"]},{"id":"RHSA-2023:7325","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0682","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.58 bug fix and security update","vulnerabilityIds":["CVE-2023-6596","CVE-2023-39325"]},{"id":"RHSA-2023:5006","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 bug fix and security update","vulnerabilityIds":["CVE-2018-17419","CVE-2021-4294","CVE-2021-20329","CVE-2021-36157","CVE-2022-3064","CVE-2022-23525","CVE-2022-23526","CVE-2022-41723","CVE-2023-0475","CVE-2023-0620","CVE-2023-0665","CVE-2023-3089","CVE-2023-3978","CVE-2023-5408","CVE-2023-25000","CVE-2023-25165","CVE-2023-25173","CVE-2023-26115","CVE-2023-26136","CVE-2023-27561","CVE-2023-29401","CVE-2023-37788","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6144","title":"Red Hat Security Advisory: Custom Metric Autoscaler operator for Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6071","title":"Red Hat Security Advisory: RHACS 4.0 enhancement and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0290","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.10 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHEA-2023:7327","title":"Red Hat Enhancement Advisory: Red Hat 3scale API Management 2.13.7 Release - Container Images","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6057","title":"Red Hat Security Advisory: toolbox security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:10142","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.39 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6275","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.42 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6041","title":"Red Hat Security Advisory: Self Node Remediation Operator 0.7.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0833","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:6818","title":"Red Hat Security Advisory: Satellite 6.14 security and bug fix update","vulnerabilityIds":["CVE-2022-0759","CVE-2022-1292","CVE-2022-2068","CVE-2022-3644","CVE-2022-3874","CVE-2022-4130","CVE-2022-40899","CVE-2022-41717","CVE-2022-44566","CVE-2022-44570","CVE-2022-44571","CVE-2022-44572","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0119","CVE-2023-1894","CVE-2023-22792","CVE-2023-22794","CVE-2023-22795","CVE-2023-22796","CVE-2023-22799","CVE-2023-27530","CVE-2023-27539","CVE-2023-29406","CVE-2023-30608","CVE-2023-31047","CVE-2023-32681","CVE-2023-36053","CVE-2023-39325","CVE-2023-40267","CVE-2023-44487"]},{"id":"RHSA-2024:1770","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.9 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2024-21501"]},{"id":"RHBA-2024:0599","title":"Red Hat Bug Fix Advisory: Migration Toolkit for Applications bug fix and enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0664","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.49 bug fix update and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2025:4240","title":"Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45288","CVE-2024-24788","CVE-2024-24789","CVE-2024-24790","CVE-2024-34156"]},{"id":"RHSA-2023:7200","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-45287"]},{"id":"RHSA-2023:6126","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.41 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13384-1","title":"velero-1.12.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6845","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.22 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7823","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.46 bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325"]},{"id":"RHSA-2024:0193","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.29 bug fix and security update","vulnerabilityIds":["CVE-2021-20329","CVE-2023-39325"]},{"id":"SUSE-SU-2024:3094-1","title":"Security update for kubernetes1.26","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2024-24786"]},{"id":"RHSA-2023:6119","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.3 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1210","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-48795"]},{"id":"RHSA-2023:7555","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142"]},{"id":"RHBA-2023:5806","title":"Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6828","title":"Red Hat Security Advisory: ACS 4.1 enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6256","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.21 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6296","title":"Red Hat Security Advisory: Release of OpenShift Serverless 1.30.2","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6156","title":"Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 8.1.0 security update","vulnerabilityIds":["CVE-2023-2431","CVE-2023-39325"]},{"id":"RHSA-2024:0837","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6200","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1.9 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1464","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.59 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6161","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:6254","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform Assisted Installer version 2.26.1 release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6785","title":"Red Hat Security Advisory: Machine Deletion Remediation Operator 0.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5542","title":"Red Hat Security Advisory: Logging Subsystem 5.5.17 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-26136","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6305","title":"Red Hat Security Advisory: Migration Toolkit for Applications security update","vulnerabilityIds":["CVE-2023-0482","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7710","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.0 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325"]},{"id":"RHSA-2023:5007","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update","vulnerabilityIds":["CVE-2021-20329","CVE-2022-41723","CVE-2023-3978","CVE-2023-37788","CVE-2023-39325"]},{"id":"RHSA-2023:6257","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.21 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6059","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6832","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2021-4048","CVE-2022-41723","CVE-2023-2121","CVE-2023-3462","CVE-2023-3978","CVE-2023-5077","CVE-2023-24534","CVE-2023-24539","CVE-2023-29400","CVE-2023-37788","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7703","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5675","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6842","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.43 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHSA-2023:6298","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5964","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update","vulnerabilityIds":["CVE-2022-41724","CVE-2022-41725","CVE-2023-24534","CVE-2023-24536","CVE-2023-24537","CVE-2023-24538","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0198","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325"]},{"id":"RHSA-2023:5947","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update","vulnerabilityIds":["CVE-2023-24532","CVE-2023-24539","CVE-2023-24540","CVE-2023-29400","CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6085","title":"Red Hat Security Advisory: Red Hat OpenShift distributed tracing security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5679","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.39 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7198","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-26159","CVE-2023-30551","CVE-2023-37788","CVE-2023-39325","CVE-2023-39326","CVE-2023-40577","CVE-2023-44487","CVE-2023-45142","CVE-2023-45285","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569"]},{"id":"SUSE-SU-2024:3098-1","title":"Security update for kubernetes1.27","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"SUSE-SU-2024:3342-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2023:7687","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.26 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6786","title":"Red Hat Security Advisory: Fence Agents Remediation Operator 0.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1458","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.18 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-47108"]},{"id":"RHBA-2023:6124","title":"Red Hat Bug Fix Advisory: Red Hat Quay v3.9.4 minor release","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHBA-2023:6852","title":"Red Hat Bug Fix Advisory: Red Hat Quay v3.9.5 minor release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-43804"]},{"id":"RHSA-2023:6235","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.5 Images security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0050","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.8 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:5810","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2025:0832","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.72 bug fix and security update","vulnerabilityIds":["CVE-2023-6597","CVE-2023-39325","CVE-2023-45288","CVE-2024-45338"]},{"id":"RHSA-2023:6836","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2026:8322","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2023-39325","CVE-2026-25679"]},{"id":"RHSA-2024:1454","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.38 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0660","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:7342","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11 low-latency extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5530","title":"Red Hat Security Advisory: Logging Subsystem 5.7.7 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6165","title":"Red Hat Security Advisory: skupper-cli and skupper-router security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1037","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.36 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6840","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5805","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7691","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.55 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7522","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.6 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"WID-SEC-W-2024-1228","title":"Red Hat OpenStack: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-1135","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-4438","CVE-2023-39326","CVE-2023-45287","CVE-2024-1394","CVE-2024-24680","CVE-2024-1141","CVE-2023-45803","CVE-2023-48795","CVE-2023-6725","CVE-2023-6110","CVE-2024-22195"]},{"id":"RHSA-2023:7344","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6233","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6121","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5697","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.52 bug fix and security update","vulnerabilityIds":["CVE-2023-2253","CVE-2023-39325"]},{"id":"RHSA-2023:5935","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 security update","vulnerabilityIds":["CVE-2022-41724","CVE-2022-41725","CVE-2023-24532","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2025:0014","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.71 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-6508"]},{"id":"RHSA-2023:6272","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.53 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHEA-2023:7235","title":"Red Hat Enhancement Advisory: ACS 4.3 enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7662","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 6.0.3 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325"]},{"id":"RHSA-2023:5951","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0766","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108","CVE-2023-48795"]},{"id":"RHSA-2023:5863","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6781","title":"Red Hat Security Advisory: openshift-pipelines-client security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6084","title":"Red Hat Security Advisory: RHACS 3.74 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6783","title":"Red Hat Security Advisory: Node Health Check Operator 0.4.1","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:10813","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.54 bug fix and security update","vulnerabilityIds":["CVE-2023-26125","CVE-2023-39325","CVE-2024-6508","CVE-2024-7409"]},{"id":"RHEA-2024:1366","title":"Red Hat Enhancement Advisory: Red Hat Developer Hub 1.1 release","vulnerabilityIds":["CVE-2023-26159","CVE-2023-39325","CVE-2023-42282","CVE-2023-44487","CVE-2023-45143","CVE-2023-48631","CVE-2023-50728"]},{"id":"RHSA-2023:6148","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.7.9 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5677","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5931","title":"Red Hat Security Advisory: Satellite 6.13.5 Async Security Update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-24439","CVE-2022-46648","CVE-2022-47318","CVE-2023-0462","CVE-2023-3817","CVE-2023-31047","CVE-2023-36053","CVE-2023-39325","CVE-2023-40267","CVE-2023-44487"]},{"id":"RHSA-2024:0302","title":"Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"msrc_CVE-2023-39325","title":"HTTP/2 rapid reset can cause excessive work in net/http","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6779","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5541","title":"Red Hat Security Advisory: Logging Subsystem 5.6.12 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-26136","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6280","title":"Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6784","title":"Red Hat Security Advisory: Node Health Check Operator 0.6.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5969","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6154","title":"Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.0","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7608","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-2635","identifiers":["EUVD-2023-2635","CVE-2023-39325","GHSA-4374-p667-p6c8"]},"retained":false,"historicalAffected":[]}],"coverage":[]}