VDB
RHSA-2023%3A6220
RHSA-2023%3A6220
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-gitops-1/console-plugin-rhel8@sha256:f74a99192da67363a283815a3d1e941d643424bc906b06057a04c5345f8bc920_amd64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/console-plugin-rhel8@sha256:f74a99192da67363a283815a3d1e941d643424bc906b06057a04c5345f8bc920_amd64, openshift-gitops-1/console-plugin-rhel8@sha256:f74a99192da67363a283815a3d1e941d643424bc906b06057a04c5345f8bc920_amd64, openshift-gitops-1/console-plugin-rhel8@sha256:f74a99192da67363a283815a3d1e941d643424bc906b06057a04c5345f8bc920_amd64 |
| Red Hat | openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64, *, openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64 |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:ead93a1bcc5a8c497ad4042c9e539450b20cbfca49bdc3677e51ca1ba881c321_amd64 as a component of Red Hat OpenShift GitOps 1.10 | *, openshift-gitops-1/argocd-rhel8@sha256:ead93a1bcc5a8c497ad4042c9e539450b20cbfca49bdc3677e51ca1ba881c321_amd64, * |
| Red Hat | openshift-gitops-1/dex-rhel8@sha256:761684931f8b8cb178b7093fd0ef4c87d048cc1eccc47fb89b14d0464024a9c7_amd64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/dex-rhel8@sha256:761684931f8b8cb178b7093fd0ef4c87d048cc1eccc47fb89b14d0464024a9c7_amd64, *, openshift-gitops-1/dex-rhel8@sha256:761684931f8b8cb178b7093fd0ef4c87d048cc1eccc47fb89b14d0464024a9c7_amd64 |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:a32794dad3fa8963e86e87744ca2595cb40d958e42e5ed8149a18c44bcc1ee15_arm64 as a component of Red Hat OpenShift GitOps 1.10 | *, openshift-gitops-1/argocd-rhel8@sha256:a32794dad3fa8963e86e87744ca2595cb40d958e42e5ed8149a18c44bcc1ee15_arm64, openshift-gitops-1/argocd-rhel8@sha256:a32794dad3fa8963e86e87744ca2595cb40d958e42e5ed8149a18c44bcc1ee15_arm64 |
| Red Hat | openshift-gitops-1/dex-rhel8@sha256:601d38d66c07145a5f4c8869c9edbe0a2934974f3a41e31e067a0db0da5dfd72_s390x as a component of Red Hat OpenShift GitOps 1.10 | *, *, openshift-gitops-1/dex-rhel8@sha256:601d38d66c07145a5f4c8869c9edbe0a2934974f3a41e31e067a0db0da5dfd72_s390x |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:a2f41d3ee8c461b471dd2714add10c8f3bc6be59f3b411d5e825061c36df3e4b_arm64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/kam-delivery-rhel8@sha256:a2f41d3ee8c461b471dd2714add10c8f3bc6be59f3b411d5e825061c36df3e4b_arm64, openshift-gitops-1/kam-delivery-rhel8@sha256:a2f41d3ee8c461b471dd2714add10c8f3bc6be59f3b411d5e825061c36df3e4b_arm64, * |
| Red Hat | openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64, openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64, openshift-gitops-1/gitops-rhel8-operator@sha256:5141a6d11f19dd426390c5041080da7f7a09eab6b9d87f7ffcb8e59483865088_amd64 |
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le, openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le, openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le |
| Red Hat | openshift-gitops-1/console-plugin-rhel8@sha256:671a50eb7cb6ec8750e72c30e0bd2f3b4a2252bcf8993bafed8e35ccd236f6dd_s390x as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/console-plugin-rhel8@sha256:671a50eb7cb6ec8750e72c30e0bd2f3b4a2252bcf8993bafed8e35ccd236f6dd_s390x, openshift-gitops-1/console-plugin-rhel8@sha256:671a50eb7cb6ec8750e72c30e0bd2f3b4a2252bcf8993bafed8e35ccd236f6dd_s390x, openshift-gitops-1/console-plugin-rhel8@sha256:671a50eb7cb6ec8750e72c30e0bd2f3b4a2252bcf8993bafed8e35ccd236f6dd_s390x |
| Red Hat | openshift-gitops-1/gitops-rhel8@sha256:f1ea4aba3566b827e4442c228fd8840e50443354bc676615dd33dd940cda3d82_s390x as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/gitops-rhel8@sha256:f1ea4aba3566b827e4442c228fd8840e50443354bc676615dd33dd940cda3d82_s390x, openshift-gitops-1/gitops-rhel8@sha256:f1ea4aba3566b827e4442c228fd8840e50443354bc676615dd33dd940cda3d82_s390x, openshift-gitops-1/gitops-rhel8@sha256:f1ea4aba3566b827e4442c228fd8840e50443354bc676615dd33dd940cda3d82_s390x |
| Red Hat | openshift-gitops-1/gitops-rhel8-operator@sha256:a1072a2be6cdb5ca8d32761c9973dfa42c5037a45caea8f8214a78e438448692_arm64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/gitops-rhel8-operator@sha256:a1072a2be6cdb5ca8d32761c9973dfa42c5037a45caea8f8214a78e438448692_arm64, openshift-gitops-1/gitops-rhel8-operator@sha256:a1072a2be6cdb5ca8d32761c9973dfa42c5037a45caea8f8214a78e438448692_arm64, * |
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le, openshift-gitops-1/argo-rollouts-rhel8@sha256:a0fbcaa5d1f06b041ad2349c9823d15dc9c280303fb8cdee6430ac958872f2e1_ppc64le, * |
| Red Hat | openshift-gitops-1/must-gather-rhel8@sha256:c03bf09c5673e74a56145b90d509e47567c89f177e08b56b1212c33a9054b37f_arm64 as a component of Red Hat OpenShift GitOps 1.10 | *, openshift-gitops-1/must-gather-rhel8@sha256:c03bf09c5673e74a56145b90d509e47567c89f177e08b56b1212c33a9054b37f_arm64, openshift-gitops-1/must-gather-rhel8@sha256:c03bf09c5673e74a56145b90d509e47567c89f177e08b56b1212c33a9054b37f_arm64 |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:a2f41d3ee8c461b471dd2714add10c8f3bc6be59f3b411d5e825061c36df3e4b_arm64 as a component of Red Hat OpenShift GitOps 1.10 | *, *, openshift-gitops-1/kam-delivery-rhel8@sha256:a2f41d3ee8c461b471dd2714add10c8f3bc6be59f3b411d5e825061c36df3e4b_arm64 |
| Red Hat | openshift-gitops-1/dex-rhel8@sha256:8f3d247e46e9d07759d29c7212e5900babe330d96d96b850fda19222e2202966_ppc64le as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/dex-rhel8@sha256:8f3d247e46e9d07759d29c7212e5900babe330d96d96b850fda19222e2202966_ppc64le, openshift-gitops-1/dex-rhel8@sha256:8f3d247e46e9d07759d29c7212e5900babe330d96d96b850fda19222e2202966_ppc64le, openshift-gitops-1/dex-rhel8@sha256:8f3d247e46e9d07759d29c7212e5900babe330d96d96b850fda19222e2202966_ppc64le |
| Red Hat | openshift-gitops-1/gitops-rhel8-operator@sha256:e2610683d9e2610d4cd58a0d082cf2508bd8731136f17774cb6118568a5da101_s390x as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/gitops-rhel8-operator@sha256:e2610683d9e2610d4cd58a0d082cf2508bd8731136f17774cb6118568a5da101_s390x, openshift-gitops-1/gitops-rhel8-operator@sha256:e2610683d9e2610d4cd58a0d082cf2508bd8731136f17774cb6118568a5da101_s390x, openshift-gitops-1/gitops-rhel8-operator@sha256:e2610683d9e2610d4cd58a0d082cf2508bd8731136f17774cb6118568a5da101_s390x |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:929b479de633cce8f697a2659c59bbb17827674e2c08a35ed16db44d3ec73632_s390x as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/kam-delivery-rhel8@sha256:929b479de633cce8f697a2659c59bbb17827674e2c08a35ed16db44d3ec73632_s390x, openshift-gitops-1/kam-delivery-rhel8@sha256:929b479de633cce8f697a2659c59bbb17827674e2c08a35ed16db44d3ec73632_s390x, openshift-gitops-1/kam-delivery-rhel8@sha256:929b479de633cce8f697a2659c59bbb17827674e2c08a35ed16db44d3ec73632_s390x |
| Red Hat | openshift-gitops-1/must-gather-rhel8@sha256:76c727a9a5ec01308f282f3434b1ff30ce0a669db3b8f573a3b6a419fee4eb47_s390x as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/must-gather-rhel8@sha256:76c727a9a5ec01308f282f3434b1ff30ce0a669db3b8f573a3b6a419fee4eb47_s390x, openshift-gitops-1/must-gather-rhel8@sha256:76c727a9a5ec01308f282f3434b1ff30ce0a669db3b8f573a3b6a419fee4eb47_s390x, openshift-gitops-1/must-gather-rhel8@sha256:76c727a9a5ec01308f282f3434b1ff30ce0a669db3b8f573a3b6a419fee4eb47_s390x |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:883698f945e44879ac8d84639addcf213bbe1af61bca67020006517b11e22f40_amd64 as a component of Red Hat OpenShift GitOps 1.10 | openshift-gitops-1/kam-delivery-rhel8@sha256:883698f945e44879ac8d84639addcf213bbe1af61bca67020006517b11e22f40_amd64, openshift-gitops-1/kam-delivery-rhel8@sha256:883698f945e44879ac8d84639addcf213bbe1af61bca67020006517b11e22f40_amd64, * |
…and 47 more
Timeline
- Oct 31, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6220 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://docs.openshift.com/gitops/latest/understanding_openshift_gitops/about-redhat-openshift-gitops.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6220.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory