CERT24RHSA-2026:73508 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager updateLoading data…
CERT24Threat Observatory
Period

RHSA-2026:73508 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager update

A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can send a specially crafted HTTP/2 SETTINGS frame with SETTINGS_MAX_FRAME_SIZE set to zero. This can cause resource exhaustion and a Denial of Service (DoS) condition.

← Back to intelligence

RHSA-2026:73508 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager update

A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can send a specially crafted HTTP/2 SETTINGS frame with SETTINGS_MAX_FRAME_SIZE set to zero. This can cause resource exhaustion and a Denial of Service (DoS) condition.