VDB
RHSA-2023%3A7608
RHSA-2023%3A7608
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-node-driver-registrar@sha256:2984f024e8438bfd6a142c761e4cbd38e4f4bfbb15994195e3ca699f67532d0c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-node-driver-registrar@sha256:2984f024e8438bfd6a142c761e4cbd38e4f4bfbb15994195e3ca699f67532d0c_amd64, openshift4/ose-csi-node-driver-registrar@sha256:2984f024e8438bfd6a142c761e4cbd38e4f4bfbb15994195e3ca699f67532d0c_amd64, openshift4/ose-csi-node-driver-registrar@sha256:2984f024e8438bfd6a142c761e4cbd38e4f4bfbb15994195e3ca699f67532d0c_amd64 |
| Red Hat | openshift4/ose-cluster-update-keys@sha256:480e8b1d7fc517adefb774a81c85e2af5c2ccd1e58c56d8df9530a87804ce074_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-update-keys@sha256:480e8b1d7fc517adefb774a81c85e2af5c2ccd1e58c56d8df9530a87804ce074_arm64, *, * |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:619789b7fbe982f940c0651752e46e2958102263e326f415604834478036fc8d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-dns-operator@sha256:619789b7fbe982f940c0651752e46e2958102263e326f415604834478036fc8d_arm64, openshift4/ose-cluster-dns-operator@sha256:619789b7fbe982f940c0651752e46e2958102263e326f415604834478036fc8d_arm64, openshift4/ose-cluster-dns-operator@sha256:619789b7fbe982f940c0651752e46e2958102263e326f415604834478036fc8d_arm64 |
| Red Hat | openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:6c873f39bd9a8294a2c4fcf885c1d9b93cfae3b6ba76208539924fe26ffe91ac_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:6c873f39bd9a8294a2c4fcf885c1d9b93cfae3b6ba76208539924fe26ffe91ac_amd64, * |
| Red Hat | openshift4/ose-csi-external-attacher-rhel8@sha256:0e82ff713320a042d25c5187a36d846ab451e783b412012de6b3668b4765da78_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-external-attacher-rhel8@sha256:0e82ff713320a042d25c5187a36d846ab451e783b412012de6b3668b4765da78_arm64, *, openshift4/ose-csi-external-attacher-rhel8@sha256:0e82ff713320a042d25c5187a36d846ab451e783b412012de6b3668b4765da78_arm64 |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:7aac748ecc821f4aa0eff96e9aa087278331d2d9e5cc6b3e5c5ab50b8d9943c0_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:7aac748ecc821f4aa0eff96e9aa087278331d2d9e5cc6b3e5c5ab50b8d9943c0_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:7aac748ecc821f4aa0eff96e9aa087278331d2d9e5cc6b3e5c5ab50b8d9943c0_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:7aac748ecc821f4aa0eff96e9aa087278331d2d9e5cc6b3e5c5ab50b8d9943c0_s390x |
| Red Hat | openshift4/ose-ironic-agent-rhel9@sha256:e56f0fbebe44cac69dc164921b50e529dbfa49d44f074cc678a166fde5262b94_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ironic-agent-rhel9@sha256:e56f0fbebe44cac69dc164921b50e529dbfa49d44f074cc678a166fde5262b94_amd64, openshift4/ose-ironic-agent-rhel9@sha256:e56f0fbebe44cac69dc164921b50e529dbfa49d44f074cc678a166fde5262b94_amd64, openshift4/ose-ironic-agent-rhel9@sha256:e56f0fbebe44cac69dc164921b50e529dbfa49d44f074cc678a166fde5262b94_amd64 |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:a5bdaf33544a43b279d580b69bca0c917d47a539369babe6063cd1c081973fb1_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-powervs-machine-controllers-rhel8@sha256:a5bdaf33544a43b279d580b69bca0c917d47a539369babe6063cd1c081973fb1_amd64, openshift4/ose-powervs-machine-controllers-rhel8@sha256:a5bdaf33544a43b279d580b69bca0c917d47a539369babe6063cd1c081973fb1_amd64, openshift4/ose-powervs-machine-controllers-rhel8@sha256:a5bdaf33544a43b279d580b69bca0c917d47a539369babe6063cd1c081973fb1_amd64 |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c6cdaae3f5187be8d3c2f18de5177d55185264fdaa2701119e63bf8523428b0c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c6cdaae3f5187be8d3c2f18de5177d55185264fdaa2701119e63bf8523428b0c_amd64, openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c6cdaae3f5187be8d3c2f18de5177d55185264fdaa2701119e63bf8523428b0c_amd64, openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c6cdaae3f5187be8d3c2f18de5177d55185264fdaa2701119e63bf8523428b0c_amd64 |
| Red Hat | openshift4/ose-olm-rukpak-rhel8@sha256:298e06d1b9d6b69b2f43a02645713a06cbc75b56822db23a2e83067af4922a1f_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-olm-rukpak-rhel8@sha256:298e06d1b9d6b69b2f43a02645713a06cbc75b56822db23a2e83067af4922a1f_arm64, openshift4/ose-olm-rukpak-rhel8@sha256:298e06d1b9d6b69b2f43a02645713a06cbc75b56822db23a2e83067af4922a1f_arm64, openshift4/ose-olm-rukpak-rhel8@sha256:298e06d1b9d6b69b2f43a02645713a06cbc75b56822db23a2e83067af4922a1f_arm64 |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:8c18ecc86885f544525520ba4be03d93f6832dc35f119b08924ca5f7a478368c_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:8c18ecc86885f544525520ba4be03d93f6832dc35f119b08924ca5f7a478368c_s390x, openshift4/ose-kube-storage-version-migrator-rhel8@sha256:8c18ecc86885f544525520ba4be03d93f6832dc35f119b08924ca5f7a478368c_s390x, * |
| Red Hat | openshift4/ose-cluster-capi-rhel8-operator@sha256:8250952a80a79354efb8ca71c5d9b5fc0a1d56884a1be34e4b479516c6d429ee_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-cluster-capi-rhel8-operator@sha256:8250952a80a79354efb8ca71c5d9b5fc0a1d56884a1be34e4b479516c6d429ee_s390x, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:de4c3402529dd82669d2acc98e84137a1aa746b7c9f1dde53519fd685b6b878b_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:de4c3402529dd82669d2acc98e84137a1aa746b7c9f1dde53519fd685b6b878b_arm64, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:de4c3402529dd82669d2acc98e84137a1aa746b7c9f1dde53519fd685b6b878b_arm64, * |
| Red Hat | openshift4/ose-ovirt-machine-controllers-rhel8@sha256:14f6e93888376446243f76b4095ad04dd9ed6431d6547306c184deeebd4e662e_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ovirt-machine-controllers-rhel8@sha256:14f6e93888376446243f76b4095ad04dd9ed6431d6547306c184deeebd4e662e_s390x, *, * |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:f0208e391551bc629469b0b351fabbd1bc734e3dc246a3d292ddf70502f9bfb9_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:f0208e391551bc629469b0b351fabbd1bc734e3dc246a3d292ddf70502f9bfb9_arm64, *, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:f0208e391551bc629469b0b351fabbd1bc734e3dc246a3d292ddf70502f9bfb9_arm64 |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:0afc7d9b71dcf2abcb742b4a081fca7b483ed27a548008186d71575e264107d2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-machine-approver@sha256:0afc7d9b71dcf2abcb742b4a081fca7b483ed27a548008186d71575e264107d2_ppc64le, *, openshift4/ose-cluster-machine-approver@sha256:0afc7d9b71dcf2abcb742b4a081fca7b483ed27a548008186d71575e264107d2_ppc64le |
| Red Hat | openshift4/ose-csi-livenessprobe@sha256:6f8b02843bc45a5453da64e06e475e92f1a6bdef0452b4e4cf482de0ec9de04c_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-livenessprobe@sha256:6f8b02843bc45a5453da64e06e475e92f1a6bdef0452b4e4cf482de0ec9de04c_s390x, *, * |
| Red Hat | openshift4/ose-cluster-version-operator@sha256:9e86dcf9677cb0c9e67bca49a9f1955ffa51acf6d66e9857c24db600cba203b9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-version-operator@sha256:9e86dcf9677cb0c9e67bca49a9f1955ffa51acf6d66e9857c24db600cba203b9_amd64, openshift4/ose-cluster-version-operator@sha256:9e86dcf9677cb0c9e67bca49a9f1955ffa51acf6d66e9857c24db600cba203b9_amd64, * |
| Red Hat | openshift4/ose-console@sha256:37a70a16a65ddb967ef6fea0d92fd9408d7d06f27592ec164963a1ccdfa7673b_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-console@sha256:37a70a16a65ddb967ef6fea0d92fd9408d7d06f27592ec164963a1ccdfa7673b_arm64, openshift4/ose-console@sha256:37a70a16a65ddb967ef6fea0d92fd9408d7d06f27592ec164963a1ccdfa7673b_arm64, openshift4/ose-console@sha256:37a70a16a65ddb967ef6fea0d92fd9408d7d06f27592ec164963a1ccdfa7673b_arm64 |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel8@sha256:bbd5fcfaf7264b0988b038c4bfb66cb9aeeae8862434c4da1864a4c09d2d14a9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-apiserver-network-proxy-rhel8@sha256:bbd5fcfaf7264b0988b038c4bfb66cb9aeeae8862434c4da1864a4c09d2d14a9_amd64, *, * |
…and 1265 more
Timeline
- Dec 6, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7608 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-19064 advisory
- https://issues.redhat.com/browse/OCPBUGS-20185 advisory
- https://issues.redhat.com/browse/OCPBUGS-20413 advisory
- https://issues.redhat.com/browse/OCPBUGS-20417 advisory
- https://issues.redhat.com/browse/OCPBUGS-21596 advisory
- https://issues.redhat.com/browse/OCPBUGS-22949 advisory
- https://issues.redhat.com/browse/OCPBUGS-23154 advisory
- https://issues.redhat.com/browse/OCPBUGS-23182 advisory
- https://issues.redhat.com/browse/OCPBUGS-23222 advisory
- https://issues.redhat.com/browse/OCPBUGS-23274 advisory
- https://issues.redhat.com/browse/OCPBUGS-23293 advisory
- https://issues.redhat.com/browse/OCPBUGS-23329 advisory
- https://issues.redhat.com/browse/OCPBUGS-23346 advisory
- https://issues.redhat.com/browse/OCPBUGS-23415 advisory
- https://issues.redhat.com/browse/OCPBUGS-23419 advisory
- https://issues.redhat.com/browse/OCPBUGS-23439 advisory
…and 8 more