VDB
RHSA-2023%3A6271
RHSA-2023%3A6271
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:9f942aa0727ddd0080810bfb06ff987a368e18eef6ee72f5db0e684f23e4846b_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/special-resource-rhel8-operator@sha256:9f942aa0727ddd0080810bfb06ff987a368e18eef6ee72f5db0e684f23e4846b_s390x |
| Red Hat | openshift4/ose-cluster-capacity@sha256:55bd52aa03b02a0552f17797df898fe5f6a93b1e12be3f5e01200a3c55a69be8_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-cluster-capacity@sha256:55bd52aa03b02a0552f17797df898fe5f6a93b1e12be3f5e01200a3c55a69be8_s390x |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bc88ab2cd02b407dd92747beca202dec54b5139dfa651957d45132689bfdbb2b_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bc88ab2cd02b407dd92747beca202dec54b5139dfa651957d45132689bfdbb2b_arm64, *, openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bc88ab2cd02b407dd92747beca202dec54b5139dfa651957d45132689bfdbb2b_arm64 |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:fd14fd037d5dde5f323a75bad8f2906b97839e394ab26ba129347df0a7fb4f54_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-node-feature-discovery@sha256:fd14fd037d5dde5f323a75bad8f2906b97839e394ab26ba129347df0a7fb4f54_s390x, *, openshift4/ose-node-feature-discovery@sha256:fd14fd037d5dde5f323a75bad8f2906b97839e394ab26ba129347df0a7fb4f54_s390x |
| Red Hat | openshift4/cloud-event-proxy-rhel8@sha256:9cb3510350f1eff7a5268dfe80ecf1fa3155002401c76a4e1d159bd4a5274db1_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/cloud-event-proxy-rhel8@sha256:9cb3510350f1eff7a5268dfe80ecf1fa3155002401c76a4e1d159bd4a5274db1_arm64, openshift4/cloud-event-proxy-rhel8@sha256:9cb3510350f1eff7a5268dfe80ecf1fa3155002401c76a4e1d159bd4a5274db1_arm64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:018c5967ff3a0ed534926a212f05dd6da5dd37b47e89c2489cd0b2e4d4bac986_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-operator-sdk-rhel8@sha256:018c5967ff3a0ed534926a212f05dd6da5dd37b47e89c2489cd0b2e4d4bac986_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dec663f5c598b1bce3843d6cebcadebadfd128739bbb0a4c2365c5ff45d9d69f_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dec663f5c598b1bce3843d6cebcadebadfd128739bbb0a4c2365c5ff45d9d69f_arm64, openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dec663f5c598b1bce3843d6cebcadebadfd128739bbb0a4c2365c5ff45d9d69f_arm64, openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dec663f5c598b1bce3843d6cebcadebadfd128739bbb0a4c2365c5ff45d9d69f_arm64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:d6a085605942f2d09e56fb8cb54043cfddb291fe579ce1de1e42ef9e43857534_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:d6a085605942f2d09e56fb8cb54043cfddb291fe579ce1de1e42ef9e43857534_s390x, *, * |
| Red Hat | openshift4/ose-local-storage-operator@sha256:f3204382104ba663fc1a9b4556b8d5ca4538fefe1532057695236ba42acb0bf2_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-local-storage-operator@sha256:f3204382104ba663fc1a9b4556b8d5ca4538fefe1532057695236ba42acb0bf2_amd64, *, openshift4/ose-local-storage-operator@sha256:f3204382104ba663fc1a9b4556b8d5ca4538fefe1532057695236ba42acb0bf2_amd64 |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:b36a4f33b10e2cede41473a48f8d8fc390af3e963347a8e395d9dc528899a926_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/special-resource-rhel8-operator@sha256:b36a4f33b10e2cede41473a48f8d8fc390af3e963347a8e395d9dc528899a926_arm64 |
| Red Hat | openshift4/ose-descheduler@sha256:ea076e495f03d21cf0b498117a85b36832bc8823185d7cc442d396325bb03462_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-descheduler@sha256:ea076e495f03d21cf0b498117a85b36832bc8823185d7cc442d396325bb03462_arm64, openshift4/ose-descheduler@sha256:ea076e495f03d21cf0b498117a85b36832bc8823185d7cc442d396325bb03462_arm64, * |
| Red Hat | openshift4/ose-grafana@sha256:45c3341384d201f296cf506d5763b1e67dc5dd4d50f8e0748a8611ced38c6f0f_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-grafana@sha256:45c3341384d201f296cf506d5763b1e67dc5dd4d50f8e0748a8611ced38c6f0f_s390x, openshift4/ose-grafana@sha256:45c3341384d201f296cf506d5763b1e67dc5dd4d50f8e0748a8611ced38c6f0f_s390x, * |
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:ca7efd41f46559abb799136489638f50e92f674ff2088fc3f06ba1fad227f063_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-egress-dns-proxy@sha256:ca7efd41f46559abb799136489638f50e92f674ff2088fc3f06ba1fad227f063_ppc64le, openshift4/ose-egress-dns-proxy@sha256:ca7efd41f46559abb799136489638f50e92f674ff2088fc3f06ba1fad227f063_ppc64le, * |
| Red Hat | openshift4/ose-local-storage-operator@sha256:11b64828d5f7ca610372b1806805c2492c2de724722571e8cceb09b72c2af486_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-local-storage-operator@sha256:11b64828d5f7ca610372b1806805c2492c2de724722571e8cceb09b72c2af486_arm64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:d6a085605942f2d09e56fb8cb54043cfddb291fe579ce1de1e42ef9e43857534_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:d6a085605942f2d09e56fb8cb54043cfddb291fe579ce1de1e42ef9e43857534_s390x, *, openshift4/ose-operator-sdk-rhel8@sha256:d6a085605942f2d09e56fb8cb54043cfddb291fe579ce1de1e42ef9e43857534_s390x |
| Red Hat | openshift4/dpu-network-rhel8-operator@sha256:f07c3f9ab2e701b53fca9d49666f45296c8ecd69d5fbcad22b8b5408764f7fc4_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/dpu-network-rhel8-operator@sha256:f07c3f9ab2e701b53fca9d49666f45296c8ecd69d5fbcad22b8b5408764f7fc4_arm64, openshift4/dpu-network-rhel8-operator@sha256:f07c3f9ab2e701b53fca9d49666f45296c8ecd69d5fbcad22b8b5408764f7fc4_arm64, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:e7cd28c5a8670af30a9b8b01286fe5235ce7a46988dc2f5a24365f2b7c522e3a_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-clusterresourceoverride-rhel8@sha256:e7cd28c5a8670af30a9b8b01286fe5235ce7a46988dc2f5a24365f2b7c522e3a_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:e7cd28c5a8670af30a9b8b01286fe5235ce7a46988dc2f5a24365f2b7c522e3a_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:e7cd28c5a8670af30a9b8b01286fe5235ce7a46988dc2f5a24365f2b7c522e3a_s390x |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:615993032c0e182402fea048684bfe2b8608274b56a55b75f8b2de46dc213c0a_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift-tech-preview/metallb-rhel8@sha256:615993032c0e182402fea048684bfe2b8608274b56a55b75f8b2de46dc213c0a_arm64, openshift-tech-preview/metallb-rhel8@sha256:615993032c0e182402fea048684bfe2b8608274b56a55b75f8b2de46dc213c0a_arm64, openshift-tech-preview/metallb-rhel8@sha256:615993032c0e182402fea048684bfe2b8608274b56a55b75f8b2de46dc213c0a_arm64 |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:cf8d4278dc26ed5c83ade28700f31b991b7f54ba46b1843ed40d4bff784d2c91_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/special-resource-rhel8-operator@sha256:cf8d4278dc26ed5c83ade28700f31b991b7f54ba46b1843ed40d4bff784d2c91_amd64, openshift4/special-resource-rhel8-operator@sha256:cf8d4278dc26ed5c83ade28700f31b991b7f54ba46b1843ed40d4bff784d2c91_amd64, openshift4/special-resource-rhel8-operator@sha256:cf8d4278dc26ed5c83ade28700f31b991b7f54ba46b1843ed40d4bff784d2c91_amd64 |
| Red Hat | openshift4/ose-node-problem-detector-rhel8@sha256:d1fd3e139fc6c1fbfeacd53f9e62c8a78fb71f02f2e5033eab33d2b8df4f0499_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-node-problem-detector-rhel8@sha256:d1fd3e139fc6c1fbfeacd53f9e62c8a78fb71f02f2e5033eab33d2b8df4f0499_s390x, openshift4/ose-node-problem-detector-rhel8@sha256:d1fd3e139fc6c1fbfeacd53f9e62c8a78fb71f02f2e5033eab33d2b8df4f0499_s390x, openshift4/ose-node-problem-detector-rhel8@sha256:d1fd3e139fc6c1fbfeacd53f9e62c8a78fb71f02f2e5033eab33d2b8df4f0499_s390x |
…and 319 more
Timeline
- Nov 8, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6271 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://access.redhat.com/articles/11258 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6271.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory