OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box adds labels `http.user_agent` and `http.method` that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent to it. HTTP header User-Agent or HTTP method for requests can be easily set by an attacker to be random and long. The library internally uses `httpconv.ServerRequest` that records every value for HTTP `method` and `User-Agent`. In order to be affected, a program has to use the `otelhttp.NewHandler` wrapper and not filter any unknown HTTP methods or User agents on the level of CDN, LB, previous middleware, etc. Version 0.44.0 fixed this issue when the values collected for attribute `http.request.method` were changed to be restricted to a set of well-known values and other high cardinality attributes were removed. As a workaround to stop being affected, `otelhttp.WithFilter()` can be used, but it requires manual careful configuration to not log certain requests entirely. For convenience and safe usage of this library, it should by default mark with the label `unknown` non-standard HTTP methods and User agents to show that such requests were made but do not increase cardinality. In case someone wants to stay with the current behavior, library API should allow to enable it.
Metrics
No CVSS v4.0
Attack Vector Network
Attack Complexity Low
Privileges Required None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
Vendors | Products |
---|---|
Opentelemetry |
|
Redhat |
|
Package | CPE | Advisory | Released Date |
---|---|---|---|
Migration Toolkit for Virtualization 2.5 | |||
migration-toolkit-virtualization/mtv-validation-rhel9:2.5.3-12 | cpe:/a:redhat:migration_toolkit_virtualization:2.5::el9 | RHBA-2023:7648 | 2023-12-05T00:00:00Z |
OADP-1.3-RHEL-9 | |||
oadp/oadp-mustgather-rhel9:1.3.0-138 | cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | RHSA-2023:7555 | 2023-11-28T00:00:00Z |
oadp/oadp-velero-plugin-for-csi-rhel9:1.3.0-34 | cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | RHSA-2023:7555 | 2023-11-28T00:00:00Z |
oadp/oadp-velero-restic-restore-helper-rhel9:1.3.0-45 | cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | RHSA-2023:7555 | 2023-11-28T00:00:00Z |
oadp/oadp-velero-rhel9:1.3.0-50 | cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | RHSA-2023:7555 | 2023-11-28T00:00:00Z |
oadp/oadp-rhel9-operator:1.3.1-40 | cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | RHSA-2024:1859 | 2024-04-16T00:00:00Z |
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | |||
rhacm2/acm-cluster-permission-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-governance-policy-addon-controller-rhel9:v2.10.5-7 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-governance-policy-framework-addon-rhel9:v2.10.5-8 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-grafana-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-must-gather-rhel9:v2.10.5-8 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-operator-bundle:v2.10.5-26 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-prometheus-config-reloader-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-prometheus-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-search-indexer-rhel9:v2.10.5-4 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-search-v2-api-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-search-v2-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/acm-volsync-addon-controller-rhel9:v2.10.5-11 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/cert-policy-controller-rhel9:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/cluster-backup-rhel9-operator:v2.10.5-17 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/config-policy-controller-rhel9:v2.10.5-8 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/console-rhel9:v2.10.5-8 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/endpoint-monitoring-rhel9-operator:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/governance-policy-propagator-rhel9:v2.10.5-8 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/grafana-dashboard-loader-rhel9:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/iam-policy-controller-rhel9:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/insights-client-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/insights-metrics-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/klusterlet-addon-controller-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/kube-rbac-proxy-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/kube-state-metrics-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/memcached-exporter-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/memcached-rhel9:v2.10.5-3 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/metrics-collector-rhel9:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multicloud-integrations-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multiclusterhub-rhel9:v2.10.5-12 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multicluster-observability-rhel9-operator:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multicluster-operators-application-rhel9:v2.10.5-4 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multicluster-operators-channel-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/multicluster-operators-subscription-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/node-exporter-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/observatorium-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/observatorium-rhel9-operator:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/prometheus-alertmanager-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/prometheus-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/rbac-query-proxy-rhel9:v2.10.5-9 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/search-collector-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/submariner-addon-rhel9:v2.10.5-16 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/thanos-receive-controller-rhel9:v2.10.5-5 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
rhacm2/thanos-rhel9:v2.10.5-6 | cpe:/a:redhat:acm:2.10::el9 | RHSA-2024:6236 | 2024-09-03T00:00:00Z |
Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | |||
rhacm2/acm-governance-policy-addon-controller-rhel8:v2.9.3-9 | cpe:/a:redhat:acm:2.9::el8 | RHSA-2024:1328 | 2024-03-14T00:00:00Z |
Red Hat Ceph Storage 5.3 | |||
ceph-2:16.2.10-266.el8cp | cpe:/a:redhat:ceph_storage:5.3::el8 | RHSA-2024:4118 | 2024-06-26T00:00:00Z |
ceph-ansible-0:6.0.28.8-1.el8cp | cpe:/a:redhat:ceph_storage:5.3::el8 | RHSA-2024:4118 | 2024-06-26T00:00:00Z |
Red Hat OpenShift Container Platform 4.12 | |||
openshift4/ose-thanos-rhel8:v4.12.0-202402081808.p0.g2867a6b.assembly.stream.el8 | cpe:/a:redhat:openshift:4.12::el8 | RHSA-2024:0833 | 2024-02-21T00:00:00Z |
Red Hat OpenShift Container Platform 4.13 | |||
openshift4/ose-thanos-rhel8:v4.13.0-202401292134.p0.g70fb57f.assembly.stream | cpe:/a:redhat:openshift:4.13::el8 | RHSA-2024:0660 | 2024-02-07T00:00:00Z |
Red Hat OpenShift Container Platform 4.14 | |||
openshift4/ose-clusterresourceoverride-rhel8:v4.14.0-202311211133.p0.gedf3612.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7469 | 2023-11-29T00:00:00Z |
openshift4/ose-clusterresourceoverride-rhel8-operator:v4.14.0-202311211133.p0.g71bd95e.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7469 | 2023-11-29T00:00:00Z |
openshift4/ose-thanos-rhel8:v4.14.0-202311211133.p0.ga267125.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7470 | 2023-11-29T00:00:00Z |
openshift4/ose-multus-networkpolicy-rhel8:v4.14.0-202311271514.p0.gcd6eae1.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7599 | 2023-12-05T00:00:00Z |
openshift4/ose-node-feature-discovery:v4.14.0-202312052033.p0.gaa5c125.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7681 | 2023-12-12T00:00:00Z |
openshift4/ose-prometheus:v4.14.0-202312051151.p0.gb7c61bc.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7682 | 2023-12-12T00:00:00Z |
openshift4/ose-operator-registry:v4.14.0-202312132033.p0.g3bb41f0.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7831 | 2024-01-03T00:00:00Z |
openshift4/ose-telemeter:v4.14.0-202312132033.p0.gc683f65.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2023:7831 | 2024-01-03T00:00:00Z |
openshift4/ose-cluster-olm-operator-rhel8:v4.14.0-202312211913.p0.g0dbbb61.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0050 | 2024-01-09T00:00:00Z |
openshift4/ose-olm-operator-controller-rhel8:v4.14.0-202312211913.p0.gd714b46.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0050 | 2024-01-09T00:00:00Z |
openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.14.0-202401090715.p0.g6516b6e.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0204 | 2024-01-17T00:00:00Z |
openshift4/ose-azure-cluster-api-controllers-rhel8:v4.14.0-202401292111.p0.g7ad2773.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0642 | 2024-02-07T00:00:00Z |
openshift4/ose-cluster-api-rhel8:v4.14.0-202401292111.p0.gae83c55.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0642 | 2024-02-07T00:00:00Z |
openshift4/ose-cluster-monitoring-operator:v4.14.0-202401311150.p0.gcef0da4.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0642 | 2024-02-07T00:00:00Z |
openshift4/ose-vsphere-cloud-controller-manager-rhel8:v4.14.0-202401292111.p0.gb04567f.assembly.stream | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:0642 | 2024-02-07T00:00:00Z |
openshift4/ose-cluster-openshift-controller-manager-operator:v4.14.0-202408070332.p0.g3985c55.assembly.stream.el8 | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:5433 | 2024-08-22T00:00:00Z |
openshift4/ose-cluster-openshift-controller-manager-operator:v4.14.0-202408260910.p0.gaccd877.assembly.stream.el8 | cpe:/a:redhat:openshift:4.14::el8 | RHSA-2024:6406 | 2024-09-11T00:00:00Z |
openshift4/ose-kubernetes-nmstate-handler-rhel9:v4.14.0-202401261353.p0.g203571f.assembly.stream | cpe:/a:redhat:openshift:4.14::el9 | RHSA-2024:0641 | 2024-02-07T00:00:00Z |
Red Hat OpenShift Container Platform 4.15 | |||
openshift4/ose-clusterresourceoverride-rhel9:v4.15.0-202401261531.p0.ge15d0ff.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7197 | 2024-02-27T00:00:00Z |
openshift4/ose-clusterresourceoverride-rhel9-operator:v4.15.0-202401261531.p0.g507210c.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7197 | 2024-02-27T00:00:00Z |
openshift4/ose-gcp-filestore-csi-driver-rhel8-operator:v4.15.0-202402100738.p0.g751262e.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7197 | 2024-02-27T00:00:00Z |
openshift4/ose-secrets-store-csi-driver-rhel8-operator:v4.15.0-202402082307.p0.gfe43620.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7197 | 2024-02-27T00:00:00Z |
openshift4/ose-secrets-store-csi-mustgather-rhel8:v4.15.0-202402082307.p0.gfe43620.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7197 | 2024-02-27T00:00:00Z |
openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8:v4.15.0-202402082307.p0.g41b367a.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-aws-ebs-csi-driver-rhel9-operator:v4.15.0-202401261531.p0.gf258bd0.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.15.0-202402082307.p0.g160cf62.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-azure-disk-csi-driver-rhel9:v4.15.0-202401261531.p0.gdcb7e1c.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-azure-file-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.g1c6294a.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-azure-file-csi-driver-rhel9:v4.15.0-202401261531.p0.g364d90d.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator:v4.15.0-202401261531.p0.g1afe553.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-cluster-monitoring-rhel9-operator:v4.15.0-202402060437.p0.ga13d634.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-cluster-node-tuning-rhel9-operator:v4.15.0-202402191707.p0.g01fc8d9.assembly.stream.el9 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-cluster-olm-operator-rhel8:v4.15.0-202402082307.p0.ga7ba898.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-cluster-storage-rhel9-operator:v4.15.0-202402050938.p0.g279df4f.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-csi-external-provisioner:v4.15.0-202402082307.p0.gce5a1a3.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-csi-external-provisioner-rhel8:v4.15.0-202402082307.p0.gce5a1a3.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.g3b91ee3.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.g516264a.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-multus-networkpolicy-rhel9:v4.15.0-202401261531.p0.g6212406.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-olm-operator-controller-rhel8:v4.15.0-202402082307.p0.ge290693.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.15.0-202402082307.p0.g2367f2c.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-operator-lifecycle-manager-rhel9:v4.15.0-202402131807.p0.g0e8b957.assembly.stream.el9 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-powervs-block-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.ga3729dc.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-powervs-block-csi-driver-rhel9:v4.15.0-202401261531.p0.g5ca428c.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-powervs-cloud-controller-manager-rhel9:v4.15.0-202401261531.p0.g521b80d.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-prometheus:v4.15.0-202401290854.p0.g6828e44.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-telemeter-rhel9:v4.15.0-202402201438.p0.g80992e5.assembly.stream.el9 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-thanos-rhel8:v4.15.0-202402082307.p0.g66161ad.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.ge0d4657.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vmware-vsphere-csi-driver-rhel9:v4.15.0-202401261531.p0.g74481e3.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.15.0-202402082307.p0.ge0d4657.assembly.stream.el8 | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vsphere-csi-driver-rhel9:v4.15.0-202401261531.p0.g74481e3.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vsphere-csi-driver-syncer-rhel9:v4.15.0-202401261531.p0.g74481e3.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-vsphere-problem-detector-rhel9:v4.15.0-202401261531.p0.gde02a75.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2023:7198 | 2024-02-27T00:00:00Z |
openshift4/ose-aws-efs-csi-driver-container-rhel8:v4.15.0-202402051038.p0.g5af4e87.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2024:0766 | 2024-02-28T00:00:00Z |
openshift4/ose-aws-efs-csi-driver-rhel8-operator:v4.15.0-202402051038.p0.ga05ecc6.assembly.stream | cpe:/a:redhat:openshift:4.15::el8 | RHSA-2024:0766 | 2024-02-28T00:00:00Z |
openshift4/ose-cluster-openshift-controller-manager-rhel9-operator:v4.15.0-202405032206.p0.g9c4fb81.assembly.stream.el9 | cpe:/a:redhat:openshift:4.15::el9 | RHSA-2024:2773 | 2024-05-15T00:00:00Z |
Red Hat OpenShift Container Platform 4.16 | |||
openshift4/ose-aws-ebs-csi-driver-rhel9:v4.16.0-202406131906.p0.g1d29a74.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-azure-cloud-controller-manager-rhel9:v4.16.0-202406131906.p0.g0e95532.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-azure-disk-csi-driver-rhel9:v4.16.0-202406131906.p0.g6b55f6f.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-azure-file-csi-driver-rhel9:v4.16.0-202406131906.p0.g5ceb190.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-cluster-olm-rhel9-operator:v4.16.0-202406131906.p0.g27bf70d.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-csi-external-provisioner-rhel9:v4.16.0-202406131906.p0.g9e8af01.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-gcp-cloud-controller-manager-rhel9:v4.16.0-202406131906.p0.g26b43df.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-ibmcloud-cluster-api-controllers-rhel9:v4.16.0-202406131906.p0.g60b7ca9.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-ibm-cloud-controller-manager-rhel9:v4.16.0-202406131906.p0.gf961f16.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-insights-rhel9-operator:v4.16.0-202406131906.p0.g3c7446c.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-nutanix-cloud-controller-manager-rhel9:v4.16.0-202406131906.p0.gc9bbc44.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-olm-operator-controller-rhel9:v4.16.0-202406131906.p0.g80b8649.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-operator-lifecycle-manager-rhel9:v4.16.0-202406131906.p0.g1aacee6.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-vmware-vsphere-csi-driver-rhel9:v4.16.0-202406131906.p0.g3cd689f.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-vsphere-csi-driver-rhel9:v4.16.0-202406131906.p0.g3cd689f.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
openshift4/ose-vsphere-csi-driver-syncer-rhel9:v4.16.0-202406131906.p0.g3cd689f.assembly.stream.el9 | cpe:/a:redhat:openshift:4.16::el9 | RHSA-2024:0041 | 2024-06-27T00:00:00Z |
Red Hat Openshift distributed tracing 3.0 | |||
rhosdt/jaeger-agent-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-all-in-one-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-collector-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-es-index-cleaner-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-es-rollover-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-ingester-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/jaeger-query-rhel8:1.51.0-1 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/opentelemetry-collector-rhel8:0.89.0-2 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/tempo-gateway-rhel8:0.1.2-19 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/tempo-query-rhel8:0.6.0-3 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
rhosdt/tempo-rhel8:2.3.0-2 | cpe:/a:redhat:openshift_distributed_tracing:3.0::el8 | RHSA-2023:7663 | 2023-12-06T00:00:00Z |
References
History
Fri, 06 Sep 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:/a:redhat:acm:2.10::el9 |
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-10-12T16:33:21.435Z
Updated: 2024-08-02T20:14:19.751Z
Reserved: 2023-10-04T16:02:46.330Z
Link: CVE-2023-45142
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-10-12T17:15:09.990
Modified: 2024-02-19T03:15:07.697
Link: CVE-2023-45142
Redhat