VDB
RHSA-2023%3A6846
RHSA-2023%3A6846
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-telemeter@sha256:b73cd9d7f4bad2cf6df91d0a06566e160860d4893e71538c3dc646a5fcdae5df_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-telemeter@sha256:b73cd9d7f4bad2cf6df91d0a06566e160860d4893e71538c3dc646a5fcdae5df_amd64, openshift4/ose-telemeter@sha256:b73cd9d7f4bad2cf6df91d0a06566e160860d4893e71538c3dc646a5fcdae5df_amd64 |
| Red Hat | openshift4/ose-docker-builder@sha256:5cad3ddf1c0affc4663113f61351e335b2bbe24b0c861d1f2ed377b481380d47_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-docker-builder@sha256:5cad3ddf1c0affc4663113f61351e335b2bbe24b0c861d1f2ed377b481380d47_s390x, openshift4/ose-docker-builder@sha256:5cad3ddf1c0affc4663113f61351e335b2bbe24b0c861d1f2ed377b481380d47_s390x, openshift4/ose-docker-builder@sha256:5cad3ddf1c0affc4663113f61351e335b2bbe24b0c861d1f2ed377b481380d47_s390x |
| Red Hat | openshift4/ose-csi-snapshot-controller@sha256:6400f828639b3620c839321d59665598b68c8d4bb1f47f67b3ffc4475d99efdf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:a65f6aa51e3f32c192e6835666c3b86ccb9c69ce2d11a1b95061dbd5cb2c1789_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-authentication-operator@sha256:a65f6aa51e3f32c192e6835666c3b86ccb9c69ce2d11a1b95061dbd5cb2c1789_s390x, *, openshift4/ose-cluster-authentication-operator@sha256:a65f6aa51e3f32c192e6835666c3b86ccb9c69ce2d11a1b95061dbd5cb2c1789_s390x |
| Red Hat | openshift4/kubevirt-csi-driver-rhel8@sha256:26840cc475f495ed8ce956fb774dfb33399a22ad3ddc0aac32ddc918cd5b6973_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/kubevirt-csi-driver-rhel8@sha256:26840cc475f495ed8ce956fb774dfb33399a22ad3ddc0aac32ddc918cd5b6973_arm64, *, * |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:7b1d5a6a09af6dbcd1a8fbcca6aadc140ecee4d772373597fdaa39f7aa32ea1c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:7b1d5a6a09af6dbcd1a8fbcca6aadc140ecee4d772373597fdaa39f7aa32ea1c_amd64, *, openshift4/ose-kube-storage-version-migrator-rhel8@sha256:7b1d5a6a09af6dbcd1a8fbcca6aadc140ecee4d772373597fdaa39f7aa32ea1c_amd64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel8@sha256:ce8606f8c798ea41f8544488fd55ba168a1417699fb191bf29afd344f0cd1686_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-agent-installer-node-agent-rhel8@sha256:ce8606f8c798ea41f8544488fd55ba168a1417699fb191bf29afd344f0cd1686_ppc64le, openshift4/ose-agent-installer-node-agent-rhel8@sha256:ce8606f8c798ea41f8544488fd55ba168a1417699fb191bf29afd344f0cd1686_ppc64le |
| Red Hat | openshift4/ose-kube-rbac-proxy@sha256:e9cff42804872a843ce7861a7870c23ff6526f5ac62c287616813dc07b5a3240_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kube-rbac-proxy@sha256:e9cff42804872a843ce7861a7870c23ff6526f5ac62c287616813dc07b5a3240_amd64, openshift4/ose-kube-rbac-proxy@sha256:e9cff42804872a843ce7861a7870c23ff6526f5ac62c287616813dc07b5a3240_amd64, * |
| Red Hat | openshift4/ovirt-csi-driver-rhel8@sha256:9ed83563b4d4412c6afaf9d957a5001045faca46cbbb10c967768458c4b3c80d_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ovirt-csi-driver-rhel8@sha256:9ed83563b4d4412c6afaf9d957a5001045faca46cbbb10c967768458c4b3c80d_arm64, *, * |
| Red Hat | openshift4/ose-cli@sha256:e6f655b65ef9d52350d95ae1f043546bf7a266080659bd472e2b17486bb55dc1_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cli@sha256:e6f655b65ef9d52350d95ae1f043546bf7a266080659bd472e2b17486bb55dc1_arm64, *, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fe950a85e2cb4587ffd94076f78ef84a7f343a2bf33374b9c269e48651cd261c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fe950a85e2cb4587ffd94076f78ef84a7f343a2bf33374b9c269e48651cd261c_amd64, *, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fe950a85e2cb4587ffd94076f78ef84a7f343a2bf33374b9c269e48651cd261c_amd64 |
| Red Hat | openshift4/ose-prometheus-operator@sha256:20c3c1ff0c7472216e3a871cad97f218848163e8010fb9fb8ef045d43e4ce663_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-operator@sha256:20c3c1ff0c7472216e3a871cad97f218848163e8010fb9fb8ef045d43e4ce663_s390x, *, openshift4/ose-prometheus-operator@sha256:20c3c1ff0c7472216e3a871cad97f218848163e8010fb9fb8ef045d43e4ce663_s390x |
| Red Hat | openshift4/ose-cli-artifacts@sha256:4b99a8584d63acf6746a82038e01bbaf85cb468a60a80260166fd018731e4c14_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-update-keys@sha256:1988ed65983563e50e4d78280d3981d4e378a96067806c83d610c20f6e92927d_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-update-keys@sha256:1988ed65983563e50e4d78280d3981d4e378a96067806c83d610c20f6e92927d_s390x, *, openshift4/ose-cluster-update-keys@sha256:1988ed65983563e50e4d78280d3981d4e378a96067806c83d610c20f6e92927d_s390x |
| Red Hat | openshift4/ose-docker-registry@sha256:54c82fb76f024439b6f5220bec842a2ab431391738ba7a8a9357ef4062978804_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-docker-registry@sha256:54c82fb76f024439b6f5220bec842a2ab431391738ba7a8a9357ef4062978804_s390x, openshift4/ose-docker-registry@sha256:54c82fb76f024439b6f5220bec842a2ab431391738ba7a8a9357ef4062978804_s390x, openshift4/ose-docker-registry@sha256:54c82fb76f024439b6f5220bec842a2ab431391738ba7a8a9357ef4062978804_s390x |
| Red Hat | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:3697aea488f98bccccf6bc819a1b3ed667aeb6923007aa34f964f77ed9b9e747_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:3697aea488f98bccccf6bc819a1b3ed667aeb6923007aa34f964f77ed9b9e747_arm64, *, openshift4/ose-azure-disk-csi-driver-rhel8@sha256:3697aea488f98bccccf6bc819a1b3ed667aeb6923007aa34f964f77ed9b9e747_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:7e75519bc15a8d4a28156a682438cdbe10bd9b9cc2f5d3fd316e52bae27106b4_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:7e75519bc15a8d4a28156a682438cdbe10bd9b9cc2f5d3fd316e52bae27106b4_arm64, *, * |
| Red Hat | openshift4/ose-pod@sha256:273ed4ba8f4b45027bba92c598531f4698b7933e63eb142f7fa2b953e8e52f6d_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-pod@sha256:273ed4ba8f4b45027bba92c598531f4698b7933e63eb142f7fa2b953e8e52f6d_ppc64le, *, * |
| Red Hat | openshift4/ose-tools-rhel8@sha256:7b1ae3df87f45b2f24bcc8ebfbc5be18b814bbd54edb47ac56ed12cc081d024e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-tools-rhel8@sha256:7b1ae3df87f45b2f24bcc8ebfbc5be18b814bbd54edb47ac56ed12cc081d024e_amd64, openshift4/ose-tools-rhel8@sha256:7b1ae3df87f45b2f24bcc8ebfbc5be18b814bbd54edb47ac56ed12cc081d024e_amd64, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:183200e004e028ad2bb4d3589ceaae4158f7ecdd5790f478eef288ff4419cd8c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:183200e004e028ad2bb4d3589ceaae4158f7ecdd5790f478eef288ff4419cd8c_ppc64le, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:183200e004e028ad2bb4d3589ceaae4158f7ecdd5790f478eef288ff4419cd8c_ppc64le, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:183200e004e028ad2bb4d3589ceaae4158f7ecdd5790f478eef288ff4419cd8c_ppc64le |
…and 1253 more
Timeline
- Nov 15, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6846 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-14551 advisory
- https://issues.redhat.com/browse/OCPBUGS-18143 advisory
- https://issues.redhat.com/browse/OCPBUGS-20278 advisory
- https://issues.redhat.com/browse/OCPBUGS-20365 advisory
- https://issues.redhat.com/browse/OCPBUGS-22205 advisory
- https://issues.redhat.com/browse/OCPBUGS-22210 advisory
- https://issues.redhat.com/browse/OCPBUGS-22870 advisory
- https://issues.redhat.com/browse/OCPBUGS-22914 advisory
- https://issues.redhat.com/browse/OCPBUGS-22932 advisory
- https://issues.redhat.com/browse/OCPBUGS-23021 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6846.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
…and 2 more