VDB
RHSA-2023%3A7478
RHSA-2023%3A7478
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-capacity@sha256:d9ed70e4ecfb1ad379c73d72f65be3502fbb4daee44c2776298cb87ffa1ad233_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-capacity@sha256:d9ed70e4ecfb1ad379c73d72f65be3502fbb4daee44c2776298cb87ffa1ad233_amd64, *, * |
| Red Hat | openshift4/ose-descheduler@sha256:fba2a97b41ade1fa3332da9f3326fb41799bb082e56d1fdedc13b102fe186a00_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-descheduler@sha256:fba2a97b41ade1fa3332da9f3326fb41799bb082e56d1fdedc13b102fe186a00_amd64, *, openshift4/ose-descheduler@sha256:fba2a97b41ade1fa3332da9f3326fb41799bb082e56d1fdedc13b102fe186a00_amd64 |
| Red Hat | openshift4/ose-sriov-network-webhook@sha256:b75e3ed4cbd27ba3497aee0445c291a80a2352a01cb186e1d627f24218023d9c_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-webhook@sha256:b75e3ed4cbd27ba3497aee0445c291a80a2352a01cb186e1d627f24218023d9c_amd64, openshift4/ose-sriov-network-webhook@sha256:b75e3ed4cbd27ba3497aee0445c291a80a2352a01cb186e1d627f24218023d9c_amd64, openshift4/ose-sriov-network-webhook@sha256:b75e3ed4cbd27ba3497aee0445c291a80a2352a01cb186e1d627f24218023d9c_amd64 |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:9f2bf73eb06b6cafc0d45878ce7d8bdb2cdbf4740d69aeef2fdf09bf4f352795_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift-tech-preview/metallb-rhel8@sha256:9f2bf73eb06b6cafc0d45878ce7d8bdb2cdbf4740d69aeef2fdf09bf4f352795_s390x, openshift-tech-preview/metallb-rhel8@sha256:9f2bf73eb06b6cafc0d45878ce7d8bdb2cdbf4740d69aeef2fdf09bf4f352795_s390x, openshift-tech-preview/metallb-rhel8@sha256:9f2bf73eb06b6cafc0d45878ce7d8bdb2cdbf4740d69aeef2fdf09bf4f352795_s390x |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:803f136b7e04ddbbaaea1d4efe7df98eaa1bd64684a5ef8a9e3aaadf731562a1_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift-tech-preview/metallb-rhel8@sha256:803f136b7e04ddbbaaea1d4efe7df98eaa1bd64684a5ef8a9e3aaadf731562a1_amd64 |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:d53b7b3f15a81fbdd76db2d7022752f55c431bc58e66be650aba4adbf160a48a_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/special-resource-rhel8-operator@sha256:d53b7b3f15a81fbdd76db2d7022752f55c431bc58e66be650aba4adbf160a48a_amd64, openshift4/special-resource-rhel8-operator@sha256:d53b7b3f15a81fbdd76db2d7022752f55c431bc58e66be650aba4adbf160a48a_amd64, * |
| Red Hat | openshift4/ose-sriov-network-device-plugin@sha256:b244a2300c50516fb0b7178e0e2a88411992fc9a472cbc87473ed272fe96c7ab_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-device-plugin@sha256:b244a2300c50516fb0b7178e0e2a88411992fc9a472cbc87473ed272fe96c7ab_amd64, openshift4/ose-sriov-network-device-plugin@sha256:b244a2300c50516fb0b7178e0e2a88411992fc9a472cbc87473ed272fe96c7ab_amd64, openshift4/ose-sriov-network-device-plugin@sha256:b244a2300c50516fb0b7178e0e2a88411992fc9a472cbc87473ed272fe96c7ab_amd64 |
| Red Hat | openshift4/ose-ptp@sha256:f7c63e6ef78c97bb5ee9614754cb52824d1c52a0918e95fe8e99a2eb6ac3f583_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-ptp@sha256:f7c63e6ef78c97bb5ee9614754cb52824d1c52a0918e95fe8e99a2eb6ac3f583_amd64, openshift4/ose-ptp@sha256:f7c63e6ef78c97bb5ee9614754cb52824d1c52a0918e95fe8e99a2eb6ac3f583_amd64 |
| Red Hat | openshift4/ose-cluster-capacity@sha256:d9ed70e4ecfb1ad379c73d72f65be3502fbb4daee44c2776298cb87ffa1ad233_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-capacity@sha256:d9ed70e4ecfb1ad379c73d72f65be3502fbb4daee44c2776298cb87ffa1ad233_amd64, openshift4/ose-cluster-capacity@sha256:d9ed70e4ecfb1ad379c73d72f65be3502fbb4daee44c2776298cb87ffa1ad233_amd64, * |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:72ddabe47a47ab617bae4c2f208eb8dffc87adc8f6ed53a818f2d735afeb6edf_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-nfd-operator@sha256:72ddabe47a47ab617bae4c2f208eb8dffc87adc8f6ed53a818f2d735afeb6edf_s390x, openshift4/ose-cluster-nfd-operator@sha256:72ddabe47a47ab617bae4c2f208eb8dffc87adc8f6ed53a818f2d735afeb6edf_s390x, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:f1da9ec1c9d2352b412bb013bcd295e167a1259cefaf4e145832b8462133f0f8_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-descheduler@sha256:da89de1e9155e7a6317d75723883f368d8a68b6cc8d5ec3e46001e6c47a66b8b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-descheduler@sha256:da89de1e9155e7a6317d75723883f368d8a68b6cc8d5ec3e46001e6c47a66b8b_ppc64le, openshift4/ose-descheduler@sha256:da89de1e9155e7a6317d75723883f368d8a68b6cc8d5ec3e46001e6c47a66b8b_ppc64le, * |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le, openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le, openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le, openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le, openshift4/special-resource-rhel8-operator@sha256:504049bf0ca9ed5a55647122763f44b832ae772ca685050706f6cb83c97b0a6b_ppc64le |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:78e18d10dbb95cec557e07ef4ef6b26c7bab385098732839df4270ac5055877f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:9dc2cd50aa60567e6ddfbfdd2300a0103ffcf4c749679eb8483f519652b1e692_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:9dc2cd50aa60567e6ddfbfdd2300a0103ffcf4c749679eb8483f519652b1e692_s390x, *, openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:9dc2cd50aa60567e6ddfbfdd2300a0103ffcf4c749679eb8483f519652b1e692_s390x |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:92d8029b306df7d4c5bdd2eecce141e41213c32f3f44eb7a9c60daa9262189be_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-sriov-infiniband-cni@sha256:92d8029b306df7d4c5bdd2eecce141e41213c32f3f44eb7a9c60daa9262189be_amd64, openshift4/ose-sriov-infiniband-cni@sha256:92d8029b306df7d4c5bdd2eecce141e41213c32f3f44eb7a9c60daa9262189be_amd64 |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:d53b7b3f15a81fbdd76db2d7022752f55c431bc58e66be650aba4adbf160a48a_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/special-resource-rhel8-operator@sha256:d53b7b3f15a81fbdd76db2d7022752f55c431bc58e66be650aba4adbf160a48a_amd64 |
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:ddca2307a9fa99ac303aad5b03f054107ee7d3d2c83c5a8757e0b6449ff0ccdd_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-descheduler-operator@sha256:ddca2307a9fa99ac303aad5b03f054107ee7d3d2c83c5a8757e0b6449ff0ccdd_amd64, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:bb1e35346f715ea1685529c6b818f0fbdcc5cf91e5c816e1b76e4dd7ea3f3250_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-clusterresourceoverride-rhel8@sha256:bb1e35346f715ea1685529c6b818f0fbdcc5cf91e5c816e1b76e4dd7ea3f3250_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:bb1e35346f715ea1685529c6b818f0fbdcc5cf91e5c816e1b76e4dd7ea3f3250_s390x, openshift4/ose-clusterresourceoverride-rhel8@sha256:bb1e35346f715ea1685529c6b818f0fbdcc5cf91e5c816e1b76e4dd7ea3f3250_s390x |
…and 319 more
Timeline
- Nov 29, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7478 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7478.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory