Skip to content
OpenAdvisories
Medium RHSA-2024:3830 1 CVE

Red Hat Security Advisory: gvisor-tap-vsock security and bug fix update

Published Oct 2, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream gvisor-tap-vsock 6:0.7.3-3.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream gvisor-tap-vsock-debuginfo 6:0.7.3-3.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream gvisor-tap-vsock-debugsource 6:0.7.3-3.el9_4

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-45290

    Memory exhaustion in multipart form parsing in net/textproto and net/http

    When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…

    Go standard library net/textproto golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2268017
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3830.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-45290
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-45290
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-45290
  • article
    http://www.openwall.com/lists/oss-security/2024/03/08/4
  • article
    https://go.dev/cl/569341
  • article
    https://go.dev/issue/65383
  • article
    https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
  • advisory
    https://pkg.go.dev/vuln/GO-2024-2599
  • article
    https://security.netapp.com/advisory/ntap-20240329-0004