VDB
RHSA-2023%3A5851
RHSA-2023%3A5851
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x, *, advanced-cluster-security/rhacs-main-rhel8@sha256:0165f336652e61518f87398d395766f408e372f1487026e6e06c5dd37e6cca24_s390x |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x, * |
| Red Hat | advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x as a component of RHACS 4.1 for RHEL 8 | *, advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x, advanced-cluster-security/rhacs-central-db-rhel8@sha256:f92672857754ee0baad0e17802ec23aa3f14e11dce65b59f60a8002a21987c75_s390x |
| Red Hat | advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64 as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64, advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64, advanced-cluster-security/rhacs-collector-rhel8@sha256:9974f6a4a1e0a9409fc5fee5addbc58ecafda1fd34231f2ac4b2972fbdbb422b_amd64 |
| Red Hat | advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64 as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64, advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64, advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64 |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64 as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:784f6bd4459fe4ba58dba416fcd4ad259ad71d15afef167d3331e43063813e0c_amd64, * |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70ea0eb9f752ea313bbfcc6248c12e9e3569df023c2a88ec07305579d8ffd1bc_amd64 as a component of RHACS 4.1 for RHEL 8 | *, *, * |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x as a component of RHACS 4.1 for RHEL 8 | *, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:505df709de90a7c86795312064564df6365d2150ee4536332c5896f767c7dd26_s390x |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le as a component of RHACS 4.1 for RHEL 8 | *, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f3c15fec3acb45f2b026820460c4be9b6d13fd2d5f10b0b7ddd8692971b2201b_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le as a component of RHACS 4.1 for RHEL 8 | *, advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le, * |
| Red Hat | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64 as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64, advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ad51e30709c6b9f4350473b72eed6f0cb037f41f08c675ad7868cc70462513ae_amd64, * |
| Red Hat | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le, *, advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ce07a0fffd33647940720096d75329a6c857e49ae9ce7fc8358ad0c33adf1a4c_s390x |
| Red Hat | advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-collector-rhel8@sha256:2168e357d9d8b663595aefd49434fa7b87e3dcb5dfb1aa9cceeddf656d89436f_ppc64le, *, * |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:70114bb8763ef837426eb11929134ba804f70ccfe4f54eda180eb754c465ad63_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x as a component of RHACS 4.1 for RHEL 8 | *, *, advanced-cluster-security/rhacs-scanner-rhel8@sha256:949cea90dd61fa675970dc2b6e2cbf7059a3095a8e679e6de8d30cac34ee2d51_s390x |
| Red Hat | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x, *, advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:6de4dae7bd8e1cae0bcf98e76380f10ce23e2d7868eac7189c5be44fb370c65b_s390x |
| Red Hat | advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64 as a component of RHACS 4.1 for RHEL 8 | *, advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64, advanced-cluster-security/rhacs-scanner-rhel8@sha256:86a79d36cdbdeccd47fd477ea503b859b068a168ec95c4a44c2784300c1dc036_amd64 |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64 as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6455831309117beb15181b443ca8f43c42b296798f9deaae25f5e180ef67f68e_amd64 |
| Red Hat | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le as a component of RHACS 4.1 for RHEL 8 | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:356142a0cef442132a39383a807ff74c6cad931071c45f44e1f7a794accf7ed1_ppc64le, *, * |
…and 47 more
Timeline
- Oct 18, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:5851 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://docs.openshift.com/acs/4.1/release_notes/41-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5851.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-44487 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487 advisory
- https://github.com/dotnet/announcements/issues/277 advisory
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit