CVE-2024-52304 is a vulnerability in the aiohttp library used by Red Hat Satellite 6.16.1, where incorrect parsing of chunk extensions leads to HTTP request smuggling. This flaw could allow an attacker to interfere with the processing of HTTP requests by the system management solution. Red Hat Satellite enables provisioning and configuration management of operating environments without requiring public Internet access. The vendor has issued updated packages that fix this vulnerability, and users should apply these updates to mitigate the risk.

The vulnerability allows HTTP request smuggling due to improper parsing of chunk extensions in aiohttp, potentially enabling an attacker to manipulate HTTP requests processed by Red Hat Satellite. The advisory rates this vulnerability as moderate severity. No known exploits in the wild have been reported at this time.

Red Hat has released updated packages for Red Hat Satellite 6.16.1 that fix the aiohttp request smuggling vulnerability (CVE-2024-52304). Users should upgrade to these updated packages as soon as possible. Before applying the update, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available in the Red Hat Satellite documentation. There is no indication that additional mitigation steps are required beyond applying the official update.