VDB
RHSA-2023%3A6275
RHSA-2023%3A6275
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:6d90803767d6ff007c9767f9f9135bf5316ec754bd8ce5dc4cc259a6133561d2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:6d90803767d6ff007c9767f9f9135bf5316ec754bd8ce5dc4cc259a6133561d2_ppc64le, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:6d90803767d6ff007c9767f9f9135bf5316ec754bd8ce5dc4cc259a6133561d2_ppc64le, * |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64, *, * |
| Red Hat | openshift4/metallb-rhel8@sha256:4c7d12333585a5805a7ed93e458c6df43e4858b0502fa7b5351395506dd36a26_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/metallb-rhel8@sha256:4c7d12333585a5805a7ed93e458c6df43e4858b0502fa7b5351395506dd36a26_arm64, *, openshift4/metallb-rhel8@sha256:4c7d12333585a5805a7ed93e458c6df43e4858b0502fa7b5351395506dd36a26_arm64 |
| Red Hat | openshift4/metallb-rhel8@sha256:e78c66a3d469c99268862c5e5d56dd978c3ec57fe459037be847e2dae5183082_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/metallb-rhel8@sha256:e78c66a3d469c99268862c5e5d56dd978c3ec57fe459037be847e2dae5183082_amd64, openshift4/metallb-rhel8@sha256:e78c66a3d469c99268862c5e5d56dd978c3ec57fe459037be847e2dae5183082_amd64, openshift4/metallb-rhel8@sha256:e78c66a3d469c99268862c5e5d56dd978c3ec57fe459037be847e2dae5183082_amd64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:3e95df45555aa4ee352081a59a80040f5c7437ab5e32774945f00165fa7d7670_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-operator-sdk-rhel8@sha256:3e95df45555aa4ee352081a59a80040f5c7437ab5e32774945f00165fa7d7670_ppc64le, openshift4/ose-operator-sdk-rhel8@sha256:3e95df45555aa4ee352081a59a80040f5c7437ab5e32774945f00165fa7d7670_ppc64le |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:5cdb626ced73e8654420157161497e7fc284ee1aaa4de75d368a3f8281a85b73_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-mustgather-rhel8@sha256:5cdb626ced73e8654420157161497e7fc284ee1aaa4de75d368a3f8281a85b73_arm64, openshift4/ose-local-storage-mustgather-rhel8@sha256:5cdb626ced73e8654420157161497e7fc284ee1aaa4de75d368a3f8281a85b73_arm64, openshift4/ose-local-storage-mustgather-rhel8@sha256:5cdb626ced73e8654420157161497e7fc284ee1aaa4de75d368a3f8281a85b73_arm64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:df50501acc1cf7c7031fdcbbb507e3d81e22bf3090ded718f4c717ed826fba09_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-diskmaker@sha256:df50501acc1cf7c7031fdcbbb507e3d81e22bf3090ded718f4c717ed826fba09_amd64, *, * |
| golang | go | |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift-tech-preview/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x, openshift-tech-preview/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:abb8de1869be8f874aab3b855d6b71a793ad2b2e7fe80ab1501d6cd184c7142d_arm64 |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x, *, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ea0385db9ddada56305621fcf134d05fd92ae5b299c23b0f74076140a64aac12_s390x |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:a90b02ce74e0ca4ab76a0ef2ede2528c86d8e0700cb04db7ae4619b5b5fc42cb_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:419aae6dd41590a224c877509c90215b2ab2bcc1f7e304aaf33a03d55668b1b9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:419aae6dd41590a224c877509c90215b2ab2bcc1f7e304aaf33a03d55668b1b9_ppc64le, *, openshift4/kubernetes-nmstate-rhel8-operator@sha256:419aae6dd41590a224c877509c90215b2ab2bcc1f7e304aaf33a03d55668b1b9_ppc64le |
| Red Hat | openshift4/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x, openshift4/metallb-rhel8@sha256:bd7db0c6b642d2ca0489bc662fb8c90aa49bfad3a4177728a832886a98ff8c24_s390x |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:64a15ee61ee026f8d7ed4b202f4eb586b7218acb6b1ed40cd37ed3e40551c145_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:64a15ee61ee026f8d7ed4b202f4eb586b7218acb6b1ed40cd37ed3e40551c145_arm64, *, openshift4/kubernetes-nmstate-rhel8-operator@sha256:64a15ee61ee026f8d7ed4b202f4eb586b7218acb6b1ed40cd37ed3e40551c145_arm64 |
| Red Hat | openshift4/ose-local-storage-operator@sha256:cb857786143e1e99247ade95bff32bc95d5bdda1e3c297dae3982a73a9961276_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-operator@sha256:cb857786143e1e99247ade95bff32bc95d5bdda1e3c297dae3982a73a9961276_arm64, *, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:b9a5d656fcefa3b0079ddefba7aaa9592082a7e7874aca124a659fde62827fe0_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:b9a5d656fcefa3b0079ddefba7aaa9592082a7e7874aca124a659fde62827fe0_amd64, openshift4/kubernetes-nmstate-rhel8-operator@sha256:b9a5d656fcefa3b0079ddefba7aaa9592082a7e7874aca124a659fde62827fe0_amd64, openshift4/kubernetes-nmstate-rhel8-operator@sha256:b9a5d656fcefa3b0079ddefba7aaa9592082a7e7874aca124a659fde62827fe0_amd64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:7825fbf0e94f5925ec4ebcab8cd3972099a7d6139b3d8730946397ae613a368b_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-operator-sdk-rhel8@sha256:7825fbf0e94f5925ec4ebcab8cd3972099a7d6139b3d8730946397ae613a368b_s390x, openshift4/ose-operator-sdk-rhel8@sha256:7825fbf0e94f5925ec4ebcab8cd3972099a7d6139b3d8730946397ae613a368b_s390x, openshift4/ose-operator-sdk-rhel8@sha256:7825fbf0e94f5925ec4ebcab8cd3972099a7d6139b3d8730946397ae613a368b_s390x |
| Red Hat | openshift4/ose-local-storage-operator@sha256:a4321b74acd5483b98b03ff7713beaa2e4fd96460de3a64db3a9f7e5c6d8c44b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-operator@sha256:a4321b74acd5483b98b03ff7713beaa2e4fd96460de3a64db3a9f7e5c6d8c44b_ppc64le, openshift4/ose-local-storage-operator@sha256:a4321b74acd5483b98b03ff7713beaa2e4fd96460de3a64db3a9f7e5c6d8c44b_ppc64le, openshift4/ose-local-storage-operator@sha256:a4321b74acd5483b98b03ff7713beaa2e4fd96460de3a64db3a9f7e5c6d8c44b_ppc64le |
…and 65 more
Timeline
- Nov 8, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6275 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6275.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory