CVE-2024-4437

Summary

CVE-2024-4437 is a vulnerability that affects the etcd package distributed with the Red Hat OpenStack platform. The issue arises because the etcd package in the Red Hat OpenStack platform uses an outdated version of http://golang.org/x/net/http2, instead of the one provided by Red Hat Enterprise Linux versions. This means that the package should be updated at compile time. The vulnerability has a base severity rating of HIGH and a base score of 7.5 according to Red Hat's security alert. It poses a potential danger to organizations as it can be exploited remotely over a network, leading to availability impact. Remediation includes updating and recompiling the etcd package with the correct version of http2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.