Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:5867
HistoryOct 18, 2023 - 9:59 p.m.

(RHSA-2023:5867) Moderate: grafana security update

2023-10-1821:59:20
access.redhat.com
12
grafana
security update
ddos
http/2
vulnerability

7.2 High

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)

A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64grafana< 9.0.9-4.el9_2grafana-9.0.9-4.el9_2.aarch64.rpm
RedHat9s390xgrafana< 9.0.9-4.el9_2grafana-9.0.9-4.el9_2.s390x.rpm
RedHat9ppc64legrafana-debugsource< 9.0.9-4.el9_2grafana-debugsource-9.0.9-4.el9_2.ppc64le.rpm
RedHat9x86_64grafana-debuginfo< 9.0.9-4.el9_2grafana-debuginfo-9.0.9-4.el9_2.x86_64.rpm
RedHat9x86_64grafana-debugsource< 9.0.9-4.el9_2grafana-debugsource-9.0.9-4.el9_2.x86_64.rpm
RedHat9x86_64grafana< 9.0.9-4.el9_2grafana-9.0.9-4.el9_2.x86_64.rpm
RedHat9s390xgrafana-debugsource< 9.0.9-4.el9_2grafana-debugsource-9.0.9-4.el9_2.s390x.rpm
RedHat9aarch64grafana-debuginfo< 9.0.9-4.el9_2grafana-debuginfo-9.0.9-4.el9_2.aarch64.rpm
RedHat9ppc64legrafana< 9.0.9-4.el9_2grafana-9.0.9-4.el9_2.ppc64le.rpm
RedHat9s390xgrafana-debuginfo< 9.0.9-4.el9_2grafana-debuginfo-9.0.9-4.el9_2.s390x.rpm
Rows per page:
1-10 of 121

Related

redhat 66
rocky 4
nessus 66
oraclelinux 8
ibm 4
redhatcve 4
almalinux 4
osv 13
github 1
openvas 8
ubuntucve 2
freebsd 1
nvd 2
amazon 3
cve 2
fedora 5
cvelist 2
vulnrichment 1
alpinelinux 1
cbl_mariner 2
redhat
redhat
(RHSA-2023:6839) Important: OpenShift Container Platform 4.14.2 security update
2023-11-15 12:00:28
(RHSA-2023:7699) Important: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
2023-12-07 14:19:13
(RHSA-2023:6788) Important: Red Hat OpenShift GitOps security update
2023-11-08 02:03:11
rocky
rocky
go-toolset:rhel8 security update
2023-10-24 18:35:47
toolbox security update
2023-11-11 23:00:15
grafana security update
2023-10-24 18:35:47
nessus
nessus
FreeBSD : traefik -- Resource exhaustion by malicious HTTP/2 client (7a1b2624-6a89-11ee-af06-5404a68ad561)
2023-10-14 00:00:00
Oracle Linux 8 : grafana (ELSA-2023-5863)
2023-10-23 00:00:00
Oracle Linux 9 : grafana (ELSA-2023-5867)
2023-10-23 00:00:00
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
grafana security update
2023-10-20 00:00:00
grafana security update
2023-10-20 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)
2023-12-08 09:00:02
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)
2023-11-28 09:53:55
Security Bulletin: IBM DataPower Gateway vulnerable to HTTP/2 "Rapid Reset" Denial of Service (CVE-2023-44487, CVE-2023-39325)
2023-10-26 17:35:42
redhatcve
redhatcve
CVE-2023-44487
2023-10-10 21:13:33
CVE-2023-39325
2023-10-11 17:12:30
CVE-2023-6596
2024-01-17 19:30:45
almalinux
almalinux
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
osv
osv
Moderate: toolbox security update
2023-10-24 00:00:00
Moderate: toolbox security update
2023-11-11 23:00:15
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1082)
2024-01-09 00:00:00
ubuntucve
ubuntucve
CVE-2023-44487
2023-10-10 00:00:00
CVE-2024-4438
2024-05-08 00:00:00
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
nvd
nvd
CVE-2024-4438
2024-05-08 09:15:09
CVE-2023-6596
2024-04-25 16:15:10
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
Low: containerd
2023-11-10 17:32:00
cve
cve
CVE-2024-4438
2024-05-08 09:15:09
CVE-2023-6596
2024-04-25 16:15:10
fedora
fedora
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
cvelist
cvelist
CVE-2024-4438 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
2024-05-08 08:59:42
CVE-2023-6596 Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)
2024-04-25 16:00:24
vulnrichment
vulnrichment
CVE-2024-4438 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
2024-05-08 08:59:42
alpinelinux
alpinelinux
CVE-2023-39325
2023-10-11 22:15:09
cbl_mariner
cbl_mariner
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5
2024-02-09 19:07:07
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5
2024-04-19 22:15:55

7.2 High

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

JSON
Related for RHSA-2023:5867
redhat66rocky4nessus66oraclelinux8ibm4redhatcve4almalinux4osv13github1openvas8ubuntucve2freebsd1nvd2amazon3cve2fedora5cvelist2vulnrichment1alpinelinux1cbl_mariner2