VDB

RHSA-2023%3A7470

RHSA-2023%3A7470 PUBLISHED CVSS 7.5 HIGH

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-prom-label-proxy@sha256:bd9cee633e2595a1a7279c4fbf3964b13f3f8e1fd9df557fcc5b32bd01a51fa5_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-prom-label-proxy@sha256:bd9cee633e2595a1a7279c4fbf3964b13f3f8e1fd9df557fcc5b32bd01a51fa5_amd64, *, openshift4/ose-prom-label-proxy@sha256:bd9cee633e2595a1a7279c4fbf3964b13f3f8e1fd9df557fcc5b32bd01a51fa5_amd64
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel8@sha256:4ab5b0ea7f94dac6c96fafb82fdec5927306f229f4b0e5b2d4ecfb4abddd6592_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-azure-disk-csi-driver-rhel8@sha256:4ab5b0ea7f94dac6c96fafb82fdec5927306f229f4b0e5b2d4ecfb4abddd6592_amd64, openshift4/ose-azure-disk-csi-driver-rhel8@sha256:4ab5b0ea7f94dac6c96fafb82fdec5927306f229f4b0e5b2d4ecfb4abddd6592_amd64, *
Red Hatopenshift4/ose-cluster-image-registry-operator@sha256:24065297d0a8c90497562050f796a6ca8c7bcc5ad351a56317c641f9de11d29c_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-image-registry-operator@sha256:24065297d0a8c90497562050f796a6ca8c7bcc5ad351a56317c641f9de11d29c_arm64, openshift4/ose-cluster-image-registry-operator@sha256:24065297d0a8c90497562050f796a6ca8c7bcc5ad351a56317c641f9de11d29c_arm64, openshift4/ose-cluster-image-registry-operator@sha256:24065297d0a8c90497562050f796a6ca8c7bcc5ad351a56317c641f9de11d29c_arm64
Red Hatopenshift4/ose-csi-external-snapshotter@sha256:2f6cc1db52eaa7d068cf8e8fdc4e3f3558d4805e807d7b08a45b546e2f931beb_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-csi-external-snapshotter@sha256:2f6cc1db52eaa7d068cf8e8fdc4e3f3558d4805e807d7b08a45b546e2f931beb_arm64, *, openshift4/ose-csi-external-snapshotter@sha256:2f6cc1db52eaa7d068cf8e8fdc4e3f3558d4805e807d7b08a45b546e2f931beb_arm64
Red Hatopenshift4/ose-pod@sha256:c010a51c5d85fcf4c302dacf231da667193e04db7cd663b0364a8eacfa9f510e_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-pod@sha256:c010a51c5d85fcf4c302dacf231da667193e04db7cd663b0364a8eacfa9f510e_amd64, openshift4/ose-pod@sha256:c010a51c5d85fcf4c302dacf231da667193e04db7cd663b0364a8eacfa9f510e_amd64, openshift4/ose-pod@sha256:c010a51c5d85fcf4c302dacf231da667193e04db7cd663b0364a8eacfa9f510e_amd64
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:61921d322b2086a7a7c3bcd48e56a3ed68665747ea31a94dcf68c0380160371a_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-etcd-rhel8-operator@sha256:61921d322b2086a7a7c3bcd48e56a3ed68665747ea31a94dcf68c0380160371a_amd64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:61921d322b2086a7a7c3bcd48e56a3ed68665747ea31a94dcf68c0380160371a_amd64
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:971f3a120374ef3c9c32ea565eae6c6835c7d44f0837919f8b10623d4286dbba_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:971f3a120374ef3c9c32ea565eae6c6835c7d44f0837919f8b10623d4286dbba_arm64
Red Hatopenshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:7db6290edc81d6579351973a5ddd9a64b0f1c63e3e518cb64c256d840b573c82_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:7db6290edc81d6579351973a5ddd9a64b0f1c63e3e518cb64c256d840b573c82_amd64, *, openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:7db6290edc81d6579351973a5ddd9a64b0f1c63e3e518cb64c256d840b573c82_amd64
Red Hatopenshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:dd7b4aa762a2a385a5942a0a10529a28b1c1c6726a6a1985dbdad94e3a5524c7_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:dd7b4aa762a2a385a5942a0a10529a28b1c1c6726a6a1985dbdad94e3a5524c7_amd64, *, openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:dd7b4aa762a2a385a5942a0a10529a28b1c1c6726a6a1985dbdad94e3a5524c7_amd64
Red Hatopenshift4/ose-azure-file-csi-driver-rhel8@sha256:8b00fa38a3825acedeee423be58fdae27af193a65cb4d4ef3961627d73ca431c_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-azure-file-csi-driver-rhel8@sha256:8b00fa38a3825acedeee423be58fdae27af193a65cb4d4ef3961627d73ca431c_amd64, *
Red Hatopenshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:5b735a7fcc0e999890e24f8c9e6352d6fe84ed6d43eeecd6d1e6c66350629ae9_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:9404a16b2a901a88ba8beb26bc0d903adff0499b95233c3b9db56cb978f19c67_s390x as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:9404a16b2a901a88ba8beb26bc0d903adff0499b95233c3b9db56cb978f19c67_s390x, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:9404a16b2a901a88ba8beb26bc0d903adff0499b95233c3b9db56cb978f19c67_s390x
Red Hatopenshift4/ose-cluster-autoscaler@sha256:f5e561507fa5a3f5d7b74eba45a073e1d7bda404e14905b4b5db8272edb9533a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-kube-state-metrics@sha256:002aa697a49d833220f4ee3976842311f421c8ebdbcef2e16b18d57561e9a21b_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-kube-state-metrics@sha256:002aa697a49d833220f4ee3976842311f421c8ebdbcef2e16b18d57561e9a21b_amd64, openshift4/ose-kube-state-metrics@sha256:002aa697a49d833220f4ee3976842311f421c8ebdbcef2e16b18d57561e9a21b_amd64
Red Hatopenshift4/ose-cluster-olm-operator-rhel8@sha256:06ac92d6eb8a48e4b52817c27d2cdf60a7098f713086ec3798db59cf4610f67d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-olm-operator-rhel8@sha256:06ac92d6eb8a48e4b52817c27d2cdf60a7098f713086ec3798db59cf4610f67d_ppc64le, *
Red Hatopenshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:eae177bfacf1c515ae4ece96657d3f7b127dff5f1832645069a774487eea403c_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:eae177bfacf1c515ae4ece96657d3f7b127dff5f1832645069a774487eea403c_amd64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:eae177bfacf1c515ae4ece96657d3f7b127dff5f1832645069a774487eea403c_amd64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:eae177bfacf1c515ae4ece96657d3f7b127dff5f1832645069a774487eea403c_amd64
Red Hatrhcos@sha256:62019916c6f07bcc1082c352ea65f94a14a07c8a60b071a9b68e9fdd4d8dcbdf_x86_64 as a component of Red Hat OpenShift Container Platform 4.14*, rhcos@sha256:62019916c6f07bcc1082c352ea65f94a14a07c8a60b071a9b68e9fdd4d8dcbdf_x86_64, rhcos@sha256:62019916c6f07bcc1082c352ea65f94a14a07c8a60b071a9b68e9fdd4d8dcbdf_x86_64
Red Hatopenshift4/ose-csi-external-resizer@sha256:266be9e6bfe68e2c5bfaa99f0d0f0d53c22b0afbc545a9ed39d7bc4a97419856_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-csi-external-resizer@sha256:266be9e6bfe68e2c5bfaa99f0d0f0d53c22b0afbc545a9ed39d7bc4a97419856_s390x, *, *
Red Hatopenshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:fa078286004fe92f0f951417f3012cb46930f5c866d50d42bcf52290fa63d297_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:fa078286004fe92f0f951417f3012cb46930f5c866d50d42bcf52290fa63d297_amd64
Red Hatopenshift4/ose-csi-driver-nfs-rhel8@sha256:08164ad02885d2297f4d1178bd2792b8304ef0dedfbbe28b24ff06ce37d5bc39_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, *

…and 1331 more

Timeline

  • Nov 29, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 21, 2026 CVE Updated

References

…and 15 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›