CVE-2024-4437

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published May 8, 2024
CWE ID 400

Summary

CVE-2024-4437 is a vulnerability that affects the etcd package distributed with the Red Hat OpenStack platform. The issue arises because the etcd package in the Red Hat OpenStack platform uses an outdated version of http://golang.org/x/net/http2, instead of the one provided by Red Hat Enterprise Linux versions. This means that the package should be updated at compile time. The vulnerability has a base severity rating of HIGH and a base score of 7.5 according to Red Hat's security alert. It poses a potential danger to organizations as it can be exploited remotely over a network, leading to availability impact. Remediation includes updating and recompiling the etcd package with the correct version of http2.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-4437 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options