VDB
RHSA-2023%3A6841
RHSA-2023%3A6841
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-local-storage-operator@sha256:5cdd123ea25f4b80f704978f678bbe101c501dbd6e0b77e7c1bffa7f0e4f890f_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-operator@sha256:5cdd123ea25f4b80f704978f678bbe101c501dbd6e0b77e7c1bffa7f0e4f890f_s390x, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x |
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:8dff43b86005388550d36c67dd55481bbb08159397a1ce578f77825add4b9eb4_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-descheduler-operator@sha256:8dff43b86005388550d36c67dd55481bbb08159397a1ce578f77825add4b9eb4_ppc64le, *, openshift4/ose-cluster-kube-descheduler-operator@sha256:8dff43b86005388550d36c67dd55481bbb08159397a1ce578f77825add4b9eb4_ppc64le |
| Red Hat | openshift4/ose-ptp-operator@sha256:57e844649f900a6432f146366364ea87ec76efcb65c6c2f4f3ae20b06c7ce854_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ptp-operator@sha256:57e844649f900a6432f146366364ea87ec76efcb65c6c2f4f3ae20b06c7ce854_ppc64le, openshift4/ose-ptp-operator@sha256:57e844649f900a6432f146366364ea87ec76efcb65c6c2f4f3ae20b06c7ce854_ppc64le, openshift4/ose-ptp-operator@sha256:57e844649f900a6432f146366364ea87ec76efcb65c6c2f4f3ae20b06c7ce854_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:077a00360df233e576ee469b92f4adda0c0a032d3eb5ee2e9fa8e7857f22b98b_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-descheduler-operator@sha256:077a00360df233e576ee469b92f4adda0c0a032d3eb5ee2e9fa8e7857f22b98b_amd64, openshift4/ose-cluster-kube-descheduler-operator@sha256:077a00360df233e576ee469b92f4adda0c0a032d3eb5ee2e9fa8e7857f22b98b_amd64, openshift4/ose-cluster-kube-descheduler-operator@sha256:077a00360df233e576ee469b92f4adda0c0a032d3eb5ee2e9fa8e7857f22b98b_amd64 |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:7ff95e326fc466c84f8465cd00fe5c888686ef8179cfc774c9e1b23e2f51638b_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:4dd269bd8c19fff24d30bdcbb360f5e448808d5b7fdd22f6543071e8de9df376_s390x |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:8fcdde3de39ca65a0d39030deeeb96f583cb876f86e3323ed6334e8d627a3ff1_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-diskmaker@sha256:8fcdde3de39ca65a0d39030deeeb96f583cb876f86e3323ed6334e8d627a3ff1_ppc64le, *, openshift4/ose-local-storage-diskmaker@sha256:8fcdde3de39ca65a0d39030deeeb96f583cb876f86e3323ed6334e8d627a3ff1_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:e68a9d58dde5603daad77d633267cd7ee798c5f7dcb0c116e053ee94def6e8a1_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:e68a9d58dde5603daad77d633267cd7ee798c5f7dcb0c116e053ee94def6e8a1_arm64, openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:e68a9d58dde5603daad77d633267cd7ee798c5f7dcb0c116e053ee94def6e8a1_arm64, openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:e68a9d58dde5603daad77d633267cd7ee798c5f7dcb0c116e053ee94def6e8a1_arm64 |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:aa585fd824a9b20483de421002f87a8dc386863d0bf5f37fbd39091db98cbfd0_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-node-feature-discovery@sha256:aa585fd824a9b20483de421002f87a8dc386863d0bf5f37fbd39091db98cbfd0_s390x, *, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:7ff95e326fc466c84f8465cd00fe5c888686ef8179cfc774c9e1b23e2f51638b_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-infiniband-cni@sha256:7ff95e326fc466c84f8465cd00fe5c888686ef8179cfc774c9e1b23e2f51638b_arm64, *, openshift4/ose-sriov-infiniband-cni@sha256:7ff95e326fc466c84f8465cd00fe5c888686ef8179cfc774c9e1b23e2f51638b_arm64 |
| Red Hat | openshift4/metallb-rhel8-operator@sha256:8bb9f5823ee1ae3599f7154f2eb477e3af67994c40236a93003b6d862ddaf443_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/metallb-rhel8-operator@sha256:8bb9f5823ee1ae3599f7154f2eb477e3af67994c40236a93003b6d862ddaf443_arm64, openshift4/metallb-rhel8-operator@sha256:8bb9f5823ee1ae3599f7154f2eb477e3af67994c40236a93003b6d862ddaf443_arm64, openshift4/metallb-rhel8-operator@sha256:8bb9f5823ee1ae3599f7154f2eb477e3af67994c40236a93003b6d862ddaf443_arm64 |
| Red Hat | openshift4/ose-cluster-capacity@sha256:a1fe5ccaafb94963e620b6d81eff5edc3644140eb51b4e30963ba17ca5c0245d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-cluster-capacity@sha256:a1fe5ccaafb94963e620b6d81eff5edc3644140eb51b4e30963ba17ca5c0245d_arm64 |
| Red Hat | openshift4/ose-contour-rhel8@sha256:b09b21fae2d5043363ae841423030e064d8308b6f29b8899eed0d0c054bf9e9e_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-contour-rhel8@sha256:b09b21fae2d5043363ae841423030e064d8308b6f29b8899eed0d0c054bf9e9e_s390x, openshift4/ose-contour-rhel8@sha256:b09b21fae2d5043363ae841423030e064d8308b6f29b8899eed0d0c054bf9e9e_s390x, openshift4/ose-contour-rhel8@sha256:b09b21fae2d5043363ae841423030e064d8308b6f29b8899eed0d0c054bf9e9e_s390x |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:48e48417e1d260f56c77c0572209b53949b871341226fb4cc1d5027d77ca35d4_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:48e48417e1d260f56c77c0572209b53949b871341226fb4cc1d5027d77ca35d4_arm64, *, openshift4/kubernetes-nmstate-rhel8-operator@sha256:48e48417e1d260f56c77c0572209b53949b871341226fb4cc1d5027d77ca35d4_arm64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:5c1f4e333b23e1f1c6503733b42177884c1a5fa28dcd6b254f9a7ff00a2d80fa_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:5c1f4e333b23e1f1c6503733b42177884c1a5fa28dcd6b254f9a7ff00a2d80fa_arm64, *, openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:5c1f4e333b23e1f1c6503733b42177884c1a5fa28dcd6b254f9a7ff00a2d80fa_arm64 |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:f4ee9889bafa1a9fe596c9d8e8a15ea4ebdd684ea16e2594d4d6cb6e4d91a1f6_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-nfd-operator@sha256:f4ee9889bafa1a9fe596c9d8e8a15ea4ebdd684ea16e2594d4d6cb6e4d91a1f6_s390x, openshift4/ose-cluster-nfd-operator@sha256:f4ee9889bafa1a9fe596c9d8e8a15ea4ebdd684ea16e2594d4d6cb6e4d91a1f6_s390x, openshift4/ose-cluster-nfd-operator@sha256:f4ee9889bafa1a9fe596c9d8e8a15ea4ebdd684ea16e2594d4d6cb6e4d91a1f6_s390x |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:02c33700f1383ef079d52f7a906a8b794f13defbb7ee81eb8261ca536ea95077_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-diskmaker@sha256:02c33700f1383ef079d52f7a906a8b794f13defbb7ee81eb8261ca536ea95077_s390x, openshift4/ose-local-storage-diskmaker@sha256:02c33700f1383ef079d52f7a906a8b794f13defbb7ee81eb8261ca536ea95077_s390x, openshift4/ose-local-storage-diskmaker@sha256:02c33700f1383ef079d52f7a906a8b794f13defbb7ee81eb8261ca536ea95077_s390x |
| Red Hat | openshift4/frr-rhel8@sha256:4902d30d18d124ec14154f19ec30d439b214354bef262adc317495e190ebadef_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/frr-rhel8@sha256:4902d30d18d124ec14154f19ec30d439b214354bef262adc317495e190ebadef_ppc64le, openshift4/frr-rhel8@sha256:4902d30d18d124ec14154f19ec30d439b214354bef262adc317495e190ebadef_ppc64le, openshift4/frr-rhel8@sha256:4902d30d18d124ec14154f19ec30d439b214354bef262adc317495e190ebadef_ppc64le |
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:46635e4e94f51f6425536dab8e5e6cd819789835d66642d55fb360fcfccd8bf0_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:46635e4e94f51f6425536dab8e5e6cd819789835d66642d55fb360fcfccd8bf0_amd64, openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:46635e4e94f51f6425536dab8e5e6cd819789835d66642d55fb360fcfccd8bf0_amd64, openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:46635e4e94f51f6425536dab8e5e6cd819789835d66642d55fb360fcfccd8bf0_amd64 |
…and 327 more
Timeline
- Nov 16, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6841 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6841.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory