VDB
RHSA-2023%3A6894
RHSA-2023%3A6894
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-multus-admission-controller@sha256:24761ab3ab8f94e0e43b2b181d8d9070df38df92ceaba8d47c9ec9ce6bf2d6f2_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-multus-admission-controller@sha256:24761ab3ab8f94e0e43b2b181d8d9070df38df92ceaba8d47c9ec9ce6bf2d6f2_s390x, openshift4/ose-multus-admission-controller@sha256:24761ab3ab8f94e0e43b2b181d8d9070df38df92ceaba8d47c9ec9ce6bf2d6f2_s390x, openshift4/ose-multus-admission-controller@sha256:24761ab3ab8f94e0e43b2b181d8d9070df38df92ceaba8d47c9ec9ce6bf2d6f2_s390x |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:dbeb0934e9191c2f18a8844d7ced845737cc11aec5e976a0c057cb7025f983bd_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-network-operator@sha256:dbeb0934e9191c2f18a8844d7ced845737cc11aec5e976a0c057cb7025f983bd_arm64, openshift4/ose-cluster-network-operator@sha256:dbeb0934e9191c2f18a8844d7ced845737cc11aec5e976a0c057cb7025f983bd_arm64, openshift4/ose-cluster-network-operator@sha256:dbeb0934e9191c2f18a8844d7ced845737cc11aec5e976a0c057cb7025f983bd_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:bdaa8d3a2ff08a009858339572a3137b26d2eaabe5271a43627d8676b234090a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-node-tuning-operator@sha256:bdaa8d3a2ff08a009858339572a3137b26d2eaabe5271a43627d8676b234090a_ppc64le, *, openshift4/ose-cluster-node-tuning-operator@sha256:bdaa8d3a2ff08a009858339572a3137b26d2eaabe5271a43627d8676b234090a_ppc64le |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:8d198f25ceae6429aabbfcb5c55b9544202ef259471e87c075060bc2d2ec7d5a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:8d198f25ceae6429aabbfcb5c55b9544202ef259471e87c075060bc2d2ec7d5a_ppc64le, *, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:8d198f25ceae6429aabbfcb5c55b9544202ef259471e87c075060bc2d2ec7d5a_ppc64le |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:5bb14cf79e7ec32ff8e54eaa216504d2d9284d4e2eb274af0dd21ba40566e0a9_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-config-operator@sha256:5bb14cf79e7ec32ff8e54eaa216504d2d9284d4e2eb274af0dd21ba40566e0a9_arm64, openshift4/ose-cluster-config-operator@sha256:5bb14cf79e7ec32ff8e54eaa216504d2d9284d4e2eb274af0dd21ba40566e0a9_arm64, openshift4/ose-cluster-config-operator@sha256:5bb14cf79e7ec32ff8e54eaa216504d2d9284d4e2eb274af0dd21ba40566e0a9_arm64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:e53bbba48589063a184e47710c1bd0d9eb0051e610853f342cb321d2633c00f3_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:e53bbba48589063a184e47710c1bd0d9eb0051e610853f342cb321d2633c00f3_s390x, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:e53bbba48589063a184e47710c1bd0d9eb0051e610853f342cb321d2633c00f3_s390x, * |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:47819a182b4b897470b633f9518d94f7a0ee75ac761062321792047bdf3d0de6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-config-operator@sha256:47819a182b4b897470b633f9518d94f7a0ee75ac761062321792047bdf3d0de6_amd64, openshift4/ose-cluster-config-operator@sha256:47819a182b4b897470b633f9518d94f7a0ee75ac761062321792047bdf3d0de6_amd64, openshift4/ose-cluster-config-operator@sha256:47819a182b4b897470b633f9518d94f7a0ee75ac761062321792047bdf3d0de6_amd64 |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:53aa8087ef13de0f8220687964c77d626f55acf5b766b1d61a6d58e0875f1279_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-cluster-config-operator@sha256:53aa8087ef13de0f8220687964c77d626f55acf5b766b1d61a6d58e0875f1279_ppc64le, openshift4/ose-cluster-config-operator@sha256:53aa8087ef13de0f8220687964c77d626f55acf5b766b1d61a6d58e0875f1279_ppc64le |
| Red Hat | rhcos@sha256:9afed7c3ca1437fb80d971179154f0a19214e2c6fdb34757a99f08d32d1eb2ad_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:5c1ae4091b74d2fbf60be3f8b109de70e40eeaaaec85491758bf69e8cb6f20b8_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:5c1ae4091b74d2fbf60be3f8b109de70e40eeaaaec85491758bf69e8cb6f20b8_arm64, *, * |
| Red Hat | openshift4/ose-cluster-capi-rhel8-operator@sha256:8beacdb2f63567e051d715a0d444976cca74d33cb2938b0cec2c26b61a91ef1f_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-capi-rhel8-operator@sha256:8beacdb2f63567e051d715a0d444976cca74d33cb2938b0cec2c26b61a91ef1f_s390x, openshift4/ose-cluster-capi-rhel8-operator@sha256:8beacdb2f63567e051d715a0d444976cca74d33cb2938b0cec2c26b61a91ef1f_s390x, openshift4/ose-cluster-capi-rhel8-operator@sha256:8beacdb2f63567e051d715a0d444976cca74d33cb2938b0cec2c26b61a91ef1f_s390x |
| Red Hat | openshift4/ose-csi-driver-manila-rhel8@sha256:7f9e165381e530c93103840190b0576425c60e290d083ac5e3ece3955cbd3084_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-driver-manila-rhel8@sha256:7f9e165381e530c93103840190b0576425c60e290d083ac5e3ece3955cbd3084_ppc64le, openshift4/ose-csi-driver-manila-rhel8@sha256:7f9e165381e530c93103840190b0576425c60e290d083ac5e3ece3955cbd3084_ppc64le, openshift4/ose-csi-driver-manila-rhel8@sha256:7f9e165381e530c93103840190b0576425c60e290d083ac5e3ece3955cbd3084_ppc64le |
| Red Hat | openshift4/ose-tools-rhel8@sha256:e5f3610254953f7155e522e579b544dd925ac1700e956653d6cb609894372834_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-tools-rhel8@sha256:e5f3610254953f7155e522e579b544dd925ac1700e956653d6cb609894372834_s390x |
| Red Hat | openshift4/ose-ironic-rhel9@sha256:36bd3492e8b32b3e2d7089b5620c735a44f37ea52a7c0c2f29fc2db483da2286_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ironic-rhel9@sha256:36bd3492e8b32b3e2d7089b5620c735a44f37ea52a7c0c2f29fc2db483da2286_amd64, openshift4/ose-ironic-rhel9@sha256:36bd3492e8b32b3e2d7089b5620c735a44f37ea52a7c0c2f29fc2db483da2286_amd64, openshift4/ose-ironic-rhel9@sha256:36bd3492e8b32b3e2d7089b5620c735a44f37ea52a7c0c2f29fc2db483da2286_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:9a9eba9c150bd734c4130d065f6b8d35007088feeda91e3c8d8be112c0a2eeb7_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:9a9eba9c150bd734c4130d065f6b8d35007088feeda91e3c8d8be112c0a2eeb7_s390x, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:9a9eba9c150bd734c4130d065f6b8d35007088feeda91e3c8d8be112c0a2eeb7_s390x, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:9a9eba9c150bd734c4130d065f6b8d35007088feeda91e3c8d8be112c0a2eeb7_s390x |
| Red Hat | openshift4/ose-etcd@sha256:b5b08c4f5ca8063747e323a65108343232e5454064c5b1e7344437ac6e7eebca_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-etcd@sha256:b5b08c4f5ca8063747e323a65108343232e5454064c5b1e7344437ac6e7eebca_arm64, openshift4/ose-etcd@sha256:b5b08c4f5ca8063747e323a65108343232e5454064c5b1e7344437ac6e7eebca_arm64, openshift4/ose-etcd@sha256:b5b08c4f5ca8063747e323a65108343232e5454064c5b1e7344437ac6e7eebca_arm64 |
| Red Hat | openshift4/ose-tests@sha256:1382830439ec038f554839a6bd985d73c5f9f77ecb73c36cf0a31f1552f634b0_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:eb1cc10aebdb4bc24580e40fc010a53e6059af3445698b0043c3b17861a758ab_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-insights-rhel8-operator@sha256:eb1cc10aebdb4bc24580e40fc010a53e6059af3445698b0043c3b17861a758ab_amd64, openshift4/ose-insights-rhel8-operator@sha256:eb1cc10aebdb4bc24580e40fc010a53e6059af3445698b0043c3b17861a758ab_amd64, openshift4/ose-insights-rhel8-operator@sha256:eb1cc10aebdb4bc24580e40fc010a53e6059af3445698b0043c3b17861a758ab_amd64 |
| Red Hat | openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ce9613c5c8760b6c5402b5f3faef88e51f3a148c125a645f5e6e0c1c5bca71bb_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ce9613c5c8760b6c5402b5f3faef88e51f3a148c125a645f5e6e0c1c5bca71bb_arm64, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ce9613c5c8760b6c5402b5f3faef88e51f3a148c125a645f5e6e0c1c5bca71bb_arm64, * |
| Red Hat | openshift4/ovirt-csi-driver-rhel7@sha256:dee0339d151efd1be6c5b3c864e8c796430d3da5d8194b067457a15c4a707b75_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ovirt-csi-driver-rhel7@sha256:dee0339d151efd1be6c5b3c864e8c796430d3da5d8194b067457a15c4a707b75_arm64, openshift4/ovirt-csi-driver-rhel7@sha256:dee0339d151efd1be6c5b3c864e8c796430d3da5d8194b067457a15c4a707b75_arm64, openshift4/ovirt-csi-driver-rhel7@sha256:dee0339d151efd1be6c5b3c864e8c796430d3da5d8194b067457a15c4a707b75_arm64 |
…and 217 more
Timeline
- Nov 21, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6894 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-20277 advisory
- https://issues.redhat.com/browse/OCPBUGS-22922 advisory
- https://issues.redhat.com/browse/OCPBUGS-22972 advisory
- https://issues.redhat.com/browse/OCPBUGS-23118 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6894.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory