VDB
RHSA-2023%3A6256
RHSA-2023%3A6256
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:ed8bd7a2df389dcf280c603b17d84d6dd6f1317cf8c25e3ff3669931dad446d6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:ed8bd7a2df389dcf280c603b17d84d6dd6f1317cf8c25e3ff3669931dad446d6_arm64, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:ed8bd7a2df389dcf280c603b17d84d6dd6f1317cf8c25e3ff3669931dad446d6_arm64, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:ed8bd7a2df389dcf280c603b17d84d6dd6f1317cf8c25e3ff3669931dad446d6_arm64 |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:24c1848eb66e1045c93dd01a2e9782e0d4dbaf7e9043c86e0f9610c498c9bb9a_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:0c5c3d96fb009e37b33807ccd70424e6963c14fafcccd1ce393d01d43557c4f7_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:0c5c3d96fb009e37b33807ccd70424e6963c14fafcccd1ce393d01d43557c4f7_s390x, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:0c5c3d96fb009e37b33807ccd70424e6963c14fafcccd1ce393d01d43557c4f7_s390x |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:2967a22f31c6bf713683085d95c4993d178f7263eb135db13b370544b1f041ed_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/metallb-rhel8-operator@sha256:2967a22f31c6bf713683085d95c4993d178f7263eb135db13b370544b1f041ed_arm64, openshift4/metallb-rhel8-operator@sha256:2967a22f31c6bf713683085d95c4993d178f7263eb135db13b370544b1f041ed_arm64 |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:ce4a5d7f767411f3eab5514e76f6602a7a0041bfa51b57e55e45f835fb56aaaf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/metallb-rhel8-operator@sha256:ce4a5d7f767411f3eab5514e76f6602a7a0041bfa51b57e55e45f835fb56aaaf_ppc64le, *, openshift4/metallb-rhel8-operator@sha256:ce4a5d7f767411f3eab5514e76f6602a7a0041bfa51b57e55e45f835fb56aaaf_ppc64le |
| Red Hat | openshift4/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64, openshift4/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64, openshift4/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64 |
| Red Hat | openshift4/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x, * |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift-tech-preview/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x, openshift-tech-preview/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x, openshift-tech-preview/metallb-rhel8@sha256:5420cd1f7d913cbc5041e96ffe4b1bc221efceb1af46db36ddd5e5c1871b8ea5_s390x |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:cee05a72f77765261166bfffb2d6acbd19a28c6eb3fed55bba38919544ec1f5d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:cee05a72f77765261166bfffb2d6acbd19a28c6eb3fed55bba38919544ec1f5d_amd64, *, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:cee05a72f77765261166bfffb2d6acbd19a28c6eb3fed55bba38919544ec1f5d_amd64 |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:1a5e2c023729824e5e4305ec74982370a20e6b475cf9946f4e026f73e6319cb7_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-network-operator@sha256:1a5e2c023729824e5e4305ec74982370a20e6b475cf9946f4e026f73e6319cb7_amd64, *, openshift4/ose-sriov-network-operator@sha256:1a5e2c023729824e5e4305ec74982370a20e6b475cf9946f4e026f73e6319cb7_amd64 |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift-tech-preview/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift-tech-preview/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift-tech-preview/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift-tech-preview/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64, openshift-tech-preview/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64, openshift-tech-preview/metallb-rhel8@sha256:07f3e521eb6cc30b852a4cc8b5fbb2899a9a52bb84d247ade26f6b0cc838dfe9_arm64 |
| Red Hat | openshift4/metallb-rhel8@sha256:05081f1f284ceb4b26f9e4874d8a6d76cd8cca5acf28ab7e067ffa6a4a483224_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/metallb-rhel8@sha256:05081f1f284ceb4b26f9e4874d8a6d76cd8cca5acf28ab7e067ffa6a4a483224_amd64, openshift4/metallb-rhel8@sha256:05081f1f284ceb4b26f9e4874d8a6d76cd8cca5acf28ab7e067ffa6a4a483224_amd64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:ed8bd7a2df389dcf280c603b17d84d6dd6f1317cf8c25e3ff3669931dad446d6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:083fe6661c61e898a677d105a2d2281ba48fcc3adf14d4586f06bb2bb8e6fd1a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-dp-admission-controller@sha256:083fe6661c61e898a677d105a2d2281ba48fcc3adf14d4586f06bb2bb8e6fd1a_ppc64le, openshift4/ose-sriov-dp-admission-controller@sha256:083fe6661c61e898a677d105a2d2281ba48fcc3adf14d4586f06bb2bb8e6fd1a_ppc64le, openshift4/ose-sriov-dp-admission-controller@sha256:083fe6661c61e898a677d105a2d2281ba48fcc3adf14d4586f06bb2bb8e6fd1a_ppc64le |
| Red Hat | openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:52c1ade7bfb4ddc6fd1a0f7e33b6135313b4ceaae660e895b99c6e98082114ae_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-dp-admission-controller@sha256:52c1ade7bfb4ddc6fd1a0f7e33b6135313b4ceaae660e895b99c6e98082114ae_arm64, openshift4/ose-sriov-dp-admission-controller@sha256:52c1ade7bfb4ddc6fd1a0f7e33b6135313b4ceaae660e895b99c6e98082114ae_arm64, openshift4/ose-sriov-dp-admission-controller@sha256:52c1ade7bfb4ddc6fd1a0f7e33b6135313b4ceaae660e895b99c6e98082114ae_arm64 |
| Red Hat | openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le, openshift4/metallb-rhel8@sha256:892336754509e4cbfa9b0c59bbfb36e5d951d27151a964abc3ec48c8d9fbcd80_ppc64le |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:f02a03ca21a69f74413da5c7a72a6aa35502b1fbd3666eb27594c622a031773d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/metallb-rhel8-operator@sha256:f02a03ca21a69f74413da5c7a72a6aa35502b1fbd3666eb27594c622a031773d_amd64, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:acaa5f1c59cf5781a5345847e9678a3ae0adeef4bded5c5957c83c869a60afe0_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:acaa5f1c59cf5781a5345847e9678a3ae0adeef4bded5c5957c83c869a60afe0_arm64, *, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:acaa5f1c59cf5781a5345847e9678a3ae0adeef4bded5c5957c83c869a60afe0_arm64 |
…and 33 more
Timeline
- Nov 8, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6256 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6256.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory