CVE-2024-4437

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning it should be updated at compile time instead.
CVSS

No CVSS.

Configurations

No configuration.

History

30 May 2024, 02:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:3467 -

24 May 2024, 00:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:3352 -

08 May 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-08 09:15

Updated : 2024-05-30 02:15


NVD link : CVE-2024-4437

Mitre link : CVE-2024-4437


JSON object : View

Products Affected

No product.

CWE
CWE-400

Uncontrolled Resource Consumption