The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning it should be updated at compile time instead.
History

Sun, 24 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2024-05-08T08:59:42.187Z

Updated: 2024-11-24T14:54:43.400Z

Reserved: 2024-05-02T16:28:57.490Z

Link: CVE-2024-4438

cve-icon Vulnrichment

Updated: 2024-08-01T20:40:47.187Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-08T09:15:09.663

Modified: 2024-11-21T09:42:49.907

Link: CVE-2024-4438

cve-icon Redhat

Severity : Important

Publid Date: 2024-05-06T00:00:00Z

Links: CVE-2024-4438 - Bugzilla