VDB
RHSA-2023%3A7604
RHSA-2023%3A7604
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le, rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le, rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:318125b4e191fd453fe554ab8dd57694993cd0cd1a8ba7c5b2177f60160cd9b3_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:318125b4e191fd453fe554ab8dd57694993cd0cd1a8ba7c5b2177f60160cd9b3_arm64, openshift4/driver-toolkit-rhel9@sha256:318125b4e191fd453fe554ab8dd57694993cd0cd1a8ba7c5b2177f60160cd9b3_arm64, openshift4/driver-toolkit-rhel9@sha256:318125b4e191fd453fe554ab8dd57694993cd0cd1a8ba7c5b2177f60160cd9b3_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:dc5a129fc1e423036155a4042e0cb03d13762872c9effc008a31d7439dc3de3e_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_aarch64, *, rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_aarch64 |
| Red Hat | openshift4/ose-operator-registry@sha256:cf973ae2b4adf0c11db04234b3ac6b8371867a1ec44d4b15eeb3aa513b1c321e_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-registry@sha256:cf973ae2b4adf0c11db04234b3ac6b8371867a1ec44d4b15eeb3aa513b1c321e_arm64, openshift4/ose-operator-registry@sha256:cf973ae2b4adf0c11db04234b3ac6b8371867a1ec44d4b15eeb3aa513b1c321e_arm64, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:f55f64c2129e5ae0531e4717b9317b04f9cf5cd8f42b62522fa80dc514ae9748_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:f55f64c2129e5ae0531e4717b9317b04f9cf5cd8f42b62522fa80dc514ae9748_amd64, *, * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:938747ab4a0bf6e11845293f9ab2756a394167bf4230fc0bfb59af56b76980fe_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-image-registry-operator@sha256:938747ab4a0bf6e11845293f9ab2756a394167bf4230fc0bfb59af56b76980fe_amd64, *, openshift4/ose-cluster-image-registry-operator@sha256:938747ab4a0bf6e11845293f9ab2756a394167bf4230fc0bfb59af56b76980fe_amd64 |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:b3f95d80c2c3a9c6291896e7bfe5f6ebb5e7d5a1af993d3d5893044b1bfc367e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:b3f95d80c2c3a9c6291896e7bfe5f6ebb5e7d5a1af993d3d5893044b1bfc367e_ppc64le, *, * |
| Red Hat | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le, rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le, rhcos@sha256:9ce9147539532e8658a78d1c26303bdded5b503b4b95fa3446ff75fbd78f5c12_ppc64le |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:a4787d4607e554c658ade223cdb4b4218d788b1308eaafca223569b333cf0e54_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-lifecycle-manager@sha256:a4787d4607e554c658ade223cdb4b4218d788b1308eaafca223569b333cf0e54_s390x, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:f55f64c2129e5ae0531e4717b9317b04f9cf5cd8f42b62522fa80dc514ae9748_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:f55f64c2129e5ae0531e4717b9317b04f9cf5cd8f42b62522fa80dc514ae9748_amd64, *, openshift4/ose-cluster-etcd-rhel8-operator@sha256:f55f64c2129e5ae0531e4717b9317b04f9cf5cd8f42b62522fa80dc514ae9748_amd64 |
| Red Hat | openshift4/ose-cluster-baremetal-operator-rhel8@sha256:b2fe6182d17dcf77450e5a350151dea53b8ea4e010e78300fdadd3c36929b634_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:b2fe6182d17dcf77450e5a350151dea53b8ea4e010e78300fdadd3c36929b634_s390x, * |
| Red Hat | openshift4/ose-openshift-state-metrics-rhel8@sha256:88f473f5d8edd0029d5d88ce0edbfaad85a3dd80e5d14eb85d16e2d629fea97b_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-openshift-state-metrics-rhel8@sha256:88f473f5d8edd0029d5d88ce0edbfaad85a3dd80e5d14eb85d16e2d629fea97b_arm64 |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:8700ffb55b94cb6482444ffc73dc043e022af9fb0f48fd70ec801c8d555c8312_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-autoscaler-operator@sha256:8700ffb55b94cb6482444ffc73dc043e022af9fb0f48fd70ec801c8d555c8312_s390x, *, openshift4/ose-cluster-autoscaler-operator@sha256:8700ffb55b94cb6482444ffc73dc043e022af9fb0f48fd70ec801c8d555c8312_s390x |
| Red Hat | openshift4/ose-console@sha256:928523f4d4ce31a99ef7ee75c767a0852b0793ba74f268e43ef808289a6bff9d_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-console@sha256:928523f4d4ce31a99ef7ee75c767a0852b0793ba74f268e43ef808289a6bff9d_ppc64le, * |
| Red Hat | openshift4/ose-haproxy-router@sha256:a932ac4d6cb9d964b5ae939c8cb4a0138392327e38a858323f041931db3b5a63_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:0fcd486af7b01cd2790201e5c813b0b8f5995360adc9d37f7df411e53260a771_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:0fcd486af7b01cd2790201e5c813b0b8f5995360adc9d37f7df411e53260a771_arm64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:0fcd486af7b01cd2790201e5c813b0b8f5995360adc9d37f7df411e53260a771_arm64, * |
| Red Hat | openshift4/ose-cluster-monitoring-operator@sha256:c0ed27055047687b64074a2409e7a4943248739fee28b5434cf5afa34ed6223c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-monitoring-operator@sha256:c0ed27055047687b64074a2409e7a4943248739fee28b5434cf5afa34ed6223c_amd64, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:1587f42f2b79da81dd66dde0fd969b22c27a8a35418c2f723389ebfbca647d6c_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:1587f42f2b79da81dd66dde0fd969b22c27a8a35418c2f723389ebfbca647d6c_s390x, openshift4/ose-cluster-etcd-rhel8-operator@sha256:1587f42f2b79da81dd66dde0fd969b22c27a8a35418c2f723389ebfbca647d6c_s390x, openshift4/ose-cluster-etcd-rhel8-operator@sha256:1587f42f2b79da81dd66dde0fd969b22c27a8a35418c2f723389ebfbca647d6c_s390x |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:75bdd2c8da249820a182634a84714865ce87725abc2bdefe3c1b0c075c986333_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-image-registry-operator@sha256:75bdd2c8da249820a182634a84714865ce87725abc2bdefe3c1b0c075c986333_s390x, *, openshift4/ose-cluster-image-registry-operator@sha256:75bdd2c8da249820a182634a84714865ce87725abc2bdefe3c1b0c075c986333_s390x |
…and 110 more
Timeline
- Dec 6, 2023 CVE Published
- May 6, 2026 Security Advisory
- May 8, 2026 Distribution Patch
- May 8, 2026 Security Advisory
- May 15, 2026 Distribution Patch
- May 21, 2026 CVE Updated
References
- https://go.dev/issue/63417 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://issues.redhat.com/browse/OCPBUGS-23504 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://issues.redhat.com/browse/OCPBUGS-23536 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
- https://issues.redhat.com/browse/OCPBUGS-11316 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://access.redhat.com/errata/RHSA-2023:7604 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-22126 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://issues.redhat.com/browse/OCPBUGS-18106 advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7604.json advisory