VDB
RHSA-2023%3A7218
RHSA-2023%3A7218
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the Rapid Reset Attack in the Go language packages. Security Bulletin https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | kmm/kernel-module-management-hub-operator-bundle@sha256:4b9879b5a7d6003b0c9586a11c2062a78794a6f92fe9ecc14da80e04149a62f8_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-operator-bundle@sha256:4b9879b5a7d6003b0c9586a11c2062a78794a6f92fe9ecc14da80e04149a62f8_arm64 |
| Red Hat | kmm/kernel-module-management-hub-operator-bundle@sha256:4b9879b5a7d6003b0c9586a11c2062a78794a6f92fe9ecc14da80e04149a62f8_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-operator-bundle@sha256:4b9879b5a7d6003b0c9586a11c2062a78794a6f92fe9ecc14da80e04149a62f8_arm64 |
| Red Hat | kmm/kernel-module-management-must-gather-rhel9@sha256:f9cec2eac1dbd3d19ce6e9d7d7c654f8eba96882dc3a5df9ad5b8cbd02e88bb9_arm64 as a component of kmm 1.1 for RHEL 9 | * |
| Red Hat | kmm/kernel-module-management-must-gather-rhel9@sha256:0c17aa8140a586ec4271f10f252e65a380f25cc73d79a3ab20e37b4cf5b0f51c_amd64 as a component of kmm 1.1 for RHEL 9 | * |
| Red Hat | kmm/kernel-module-management-hub-rhel9-operator@sha256:6793da0209a2427a3280287c514e0f6c1f4927e65fd2079d7b1528b1d074cba6_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-rhel9-operator@sha256:6793da0209a2427a3280287c514e0f6c1f4927e65fd2079d7b1528b1d074cba6_ppc64le |
| Red Hat | kmm/kernel-module-management-must-gather-rhel9@sha256:45c6a0a49602a2866490ae59036b5a585d243cdc7e802055b34eb2e8ebbbc98d_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-must-gather-rhel9@sha256:45c6a0a49602a2866490ae59036b5a585d243cdc7e802055b34eb2e8ebbbc98d_ppc64le |
| Red Hat | kmm/kernel-module-management-must-gather-rhel9@sha256:f9cec2eac1dbd3d19ce6e9d7d7c654f8eba96882dc3a5df9ad5b8cbd02e88bb9_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-must-gather-rhel9@sha256:f9cec2eac1dbd3d19ce6e9d7d7c654f8eba96882dc3a5df9ad5b8cbd02e88bb9_arm64 |
| Red Hat | kmm/kernel-module-management-operator-bundle@sha256:c1fbd5600ce0eaa118012e9d7a0a3e7b4d75b5c78b369f6cb3525aee7eae93a7_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-operator-bundle@sha256:c1fbd5600ce0eaa118012e9d7a0a3e7b4d75b5c78b369f6cb3525aee7eae93a7_ppc64le |
| Red Hat | kmm/kernel-module-management-hub-rhel9-operator@sha256:cb0727de29d42ac9c79bf51474b72fb55f04fdc2a05876e944443669750f5ee6_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-rhel9-operator@sha256:cb0727de29d42ac9c79bf51474b72fb55f04fdc2a05876e944443669750f5ee6_arm64 |
| Red Hat | kmm/kernel-module-management-rhel9-operator@sha256:0964ed8ca8a915f0f2b3ac4cc8aa7d885e541595a9ed959a18fffc771f591716_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-rhel9-operator@sha256:0964ed8ca8a915f0f2b3ac4cc8aa7d885e541595a9ed959a18fffc771f591716_ppc64le |
| Red Hat | kmm/kernel-module-management-hub-rhel9-operator@sha256:ecc37b90a477748766aa11784966f695b83e6e1a2d4eca48fd9167f920c33615_amd64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-rhel9-operator@sha256:ecc37b90a477748766aa11784966f695b83e6e1a2d4eca48fd9167f920c33615_amd64 |
| Red Hat | kmm/kernel-module-management-signing-rhel9@sha256:3feee1b84375b7e5e936bab7d4d2340be0452bbfda959e5d1aec520f0f606887_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-signing-rhel9@sha256:3feee1b84375b7e5e936bab7d4d2340be0452bbfda959e5d1aec520f0f606887_ppc64le |
| Red Hat | kmm/kernel-module-management-signing-rhel9@sha256:3feee1b84375b7e5e936bab7d4d2340be0452bbfda959e5d1aec520f0f606887_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-signing-rhel9@sha256:3feee1b84375b7e5e936bab7d4d2340be0452bbfda959e5d1aec520f0f606887_ppc64le |
| Red Hat | kmm/kernel-module-management-operator-bundle@sha256:c1fbd5600ce0eaa118012e9d7a0a3e7b4d75b5c78b369f6cb3525aee7eae93a7_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-operator-bundle@sha256:c1fbd5600ce0eaa118012e9d7a0a3e7b4d75b5c78b369f6cb3525aee7eae93a7_ppc64le |
| Red Hat | kmm/kernel-module-management-signing-rhel9@sha256:fe37c0a672e97518b01abf7b998d50dd79e47bcd7e1d60950d64b812a599f8cd_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-signing-rhel9@sha256:fe37c0a672e97518b01abf7b998d50dd79e47bcd7e1d60950d64b812a599f8cd_arm64 |
| Red Hat | kmm/kernel-module-management-must-gather-rhel9@sha256:0c17aa8140a586ec4271f10f252e65a380f25cc73d79a3ab20e37b4cf5b0f51c_amd64 as a component of kmm 1.1 for RHEL 9 | * |
| Red Hat | kmm/kernel-module-management-hub-rhel9-operator@sha256:6793da0209a2427a3280287c514e0f6c1f4927e65fd2079d7b1528b1d074cba6_ppc64le as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-rhel9-operator@sha256:6793da0209a2427a3280287c514e0f6c1f4927e65fd2079d7b1528b1d074cba6_ppc64le |
| Red Hat | kmm/kernel-module-management-rhel9-operator@sha256:c0062d91d15628ccc35133b67bcedb82076ed22b5c180fdfbae360c8e25e8a47_arm64 as a component of kmm 1.1 for RHEL 9 | * |
| Red Hat | kmm/kernel-module-management-signing-rhel9@sha256:8f7e525974f388a0c33e227e9cd283b16edcf085819f89a37e41f27a872fa832_amd64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-signing-rhel9@sha256:8f7e525974f388a0c33e227e9cd283b16edcf085819f89a37e41f27a872fa832_amd64 |
| Red Hat | kmm/kernel-module-management-hub-rhel9-operator@sha256:cb0727de29d42ac9c79bf51474b72fb55f04fdc2a05876e944443669750f5ee6_arm64 as a component of kmm 1.1 for RHEL 9 | kmm/kernel-module-management-hub-rhel9-operator@sha256:cb0727de29d42ac9c79bf51474b72fb55f04fdc2a05876e944443669750f5ee6_arm64 |
…and 16 more
Timeline
- Nov 15, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7218 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7218.json advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-44487 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487 advisory
- https://github.com/dotnet/announcements/issues/277 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit