VDB
RHSA-2023%3A7682
RHSA-2023%3A7682
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:c074b99f606a6eba6b937f3d96115ec5790b747f6c0b6f6eed01e4f1a3a189eb_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-kube-apiserver-operator@sha256:c074b99f606a6eba6b937f3d96115ec5790b747f6c0b6f6eed01e4f1a3a189eb_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:c074b99f606a6eba6b937f3d96115ec5790b747f6c0b6f6eed01e4f1a3a189eb_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:c074b99f606a6eba6b937f3d96115ec5790b747f6c0b6f6eed01e4f1a3a189eb_amd64 |
| Red Hat | openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64, openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64, openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:5c37f3811b5adf514fda329744afb39b6613f39213f8ad6c263f46909f35ce6d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-rhel9@sha256:5c37f3811b5adf514fda329744afb39b6613f39213f8ad6c263f46909f35ce6d_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:5c37f3811b5adf514fda329744afb39b6613f39213f8ad6c263f46909f35ce6d_ppc64le, * |
| Red Hat | openshift4/ose-network-metrics-daemon-rhel8@sha256:892b22763081d559ad43d83603ee6886d040ecddc8db90958650e77d86904756_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-network-metrics-daemon-rhel8@sha256:892b22763081d559ad43d83603ee6886d040ecddc8db90958650e77d86904756_s390x, openshift4/ose-network-metrics-daemon-rhel8@sha256:892b22763081d559ad43d83603ee6886d040ecddc8db90958650e77d86904756_s390x, * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:53497a9df41ff9cf54c1354974f01344864634ef29939b2ef929e4f87bba45cc_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:53497a9df41ff9cf54c1354974f01344864634ef29939b2ef929e4f87bba45cc_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:53497a9df41ff9cf54c1354974f01344864634ef29939b2ef929e4f87bba45cc_arm64, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:e7e511a5446948ca0103951e41307c47417298d606247bc81abca1aced0b2ff5_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-agent-installer-api-server-rhel8@sha256:e7e511a5446948ca0103951e41307c47417298d606247bc81abca1aced0b2ff5_arm64, openshift4/ose-agent-installer-api-server-rhel8@sha256:e7e511a5446948ca0103951e41307c47417298d606247bc81abca1aced0b2ff5_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a3bf3970798a78e630b522e6ceafe9e5f389e2686e3568907657896d5490418e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a3bf3970798a78e630b522e6ceafe9e5f389e2686e3568907657896d5490418e_amd64, *, * |
| Red Hat | openshift4/ose-machine-api-operator@sha256:eaa3e7ed470a63a03a53fd60fa1cf804e0fb94d020bdf944c267b5a98d9c7566_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-operator@sha256:eaa3e7ed470a63a03a53fd60fa1cf804e0fb94d020bdf944c267b5a98d9c7566_arm64, openshift4/ose-machine-api-operator@sha256:eaa3e7ed470a63a03a53fd60fa1cf804e0fb94d020bdf944c267b5a98d9c7566_arm64, openshift4/ose-machine-api-operator@sha256:eaa3e7ed470a63a03a53fd60fa1cf804e0fb94d020bdf944c267b5a98d9c7566_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:3f76241d576d2649cb6d8a28024043ab7a669df317d0f6879f168bb6563b9c95_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes@sha256:3f76241d576d2649cb6d8a28024043ab7a669df317d0f6879f168bb6563b9c95_arm64, *, * |
| Red Hat | openshift4/ose-tests@sha256:13d00fd93ada222af7707631d2831b1929b94ae47b6bb512409fcf47765f342c_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-tests@sha256:13d00fd93ada222af7707631d2831b1929b94ae47b6bb512409fcf47765f342c_amd64 |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:9bd4f62f6bc6ebd6b19d2b41858cebad49c45b19f9a7daad125116f28c53dce4_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-insights-rhel8-operator@sha256:9bd4f62f6bc6ebd6b19d2b41858cebad49c45b19f9a7daad125116f28c53dce4_ppc64le, openshift4/ose-insights-rhel8-operator@sha256:9bd4f62f6bc6ebd6b19d2b41858cebad49c45b19f9a7daad125116f28c53dce4_ppc64le, * |
| Red Hat | rhcos@sha256:dd18922ec1b121ffeda3adbf0346ed3936aac9ff060c9ba72b6e5f12b2d7d6fa_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | rhcos@sha256:dd18922ec1b121ffeda3adbf0346ed3936aac9ff060c9ba72b6e5f12b2d7d6fa_ppc64le, rhcos@sha256:dd18922ec1b121ffeda3adbf0346ed3936aac9ff060c9ba72b6e5f12b2d7d6fa_ppc64le, rhcos@sha256:dd18922ec1b121ffeda3adbf0346ed3936aac9ff060c9ba72b6e5f12b2d7d6fa_ppc64le |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9bdc4879c9ec496c45611a537ce26a8d30242b4ba0e5bccaa7b8b81ce67f1b54_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9bdc4879c9ec496c45611a537ce26a8d30242b4ba0e5bccaa7b8b81ce67f1b54_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9bdc4879c9ec496c45611a537ce26a8d30242b4ba0e5bccaa7b8b81ce67f1b54_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9bdc4879c9ec496c45611a537ce26a8d30242b4ba0e5bccaa7b8b81ce67f1b54_s390x |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:e09f1d49fbb3a1ee310a26761f43a21256b70fe9c1bd86ce912a11f98a9ed726_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:e09f1d49fbb3a1ee310a26761f43a21256b70fe9c1bd86ce912a11f98a9ed726_arm64 |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel8@sha256:dca52273b33af9c05d5da2000776bbda9add8248a260ae77212f14fa24e01519_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64, openshift4/ose-prometheus@sha256:1e6fdaee4ef701d8708e85679fbd2b7e3329dc9304beadc1a6a1ee90e693cfab_arm64 |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:a6cd9f3062edcaa7120e6583777baa01881240a3482dc57d5efaef4625b3ea90_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:a6cd9f3062edcaa7120e6583777baa01881240a3482dc57d5efaef4625b3ea90_ppc64le, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:a6cd9f3062edcaa7120e6583777baa01881240a3482dc57d5efaef4625b3ea90_ppc64le, * |
| Red Hat | openshift4/ose-machine-api-operator@sha256:0f74e4a8668a64b0eb72b7cef2fcf18f32ea04c34e35f8fec405f6ff80e6a112_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-operator@sha256:0f74e4a8668a64b0eb72b7cef2fcf18f32ea04c34e35f8fec405f6ff80e6a112_amd64, *, openshift4/ose-machine-api-operator@sha256:0f74e4a8668a64b0eb72b7cef2fcf18f32ea04c34e35f8fec405f6ff80e6a112_amd64 |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:557626af805fbe29caa5e1f44a7f93b62cb3535badb5baa5cda6ecb4114d314a_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-hyperkube-rhel9@sha256:557626af805fbe29caa5e1f44a7f93b62cb3535badb5baa5cda6ecb4114d314a_arm64 |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:983ce415d6f8ba25e024e7917906a67af92e9281797a5d1a1ddd04fd8538e34a_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:983ce415d6f8ba25e024e7917906a67af92e9281797a5d1a1ddd04fd8538e34a_s390x, *, * |
…and 205 more
Timeline
- Dec 12, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7682 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://issues.redhat.com/browse/OCPBUGS-20554 advisory
- https://issues.redhat.com/browse/OCPBUGS-21774 advisory
- https://issues.redhat.com/browse/OCPBUGS-21845 advisory
- https://issues.redhat.com/browse/OCPBUGS-22295 advisory
- https://issues.redhat.com/browse/OCPBUGS-22375 advisory
- https://issues.redhat.com/browse/OCPBUGS-22478 advisory
- https://issues.redhat.com/browse/OCPBUGS-23445 advisory
- https://issues.redhat.com/browse/OCPBUGS-23474 advisory
- https://issues.redhat.com/browse/OCPBUGS-23566 advisory
- https://issues.redhat.com/browse/OCPBUGS-23569 advisory
- https://issues.redhat.com/browse/OCPBUGS-23747 advisory
- https://issues.redhat.com/browse/OCPBUGS-23903 advisory
- https://issues.redhat.com/browse/OCPBUGS-23982 advisory
- https://issues.redhat.com/browse/OCPBUGS-24063 advisory
- https://issues.redhat.com/browse/OCPBUGS-24196 advisory
- https://issues.redhat.com/browse/OCPBUGS-24262 advisory
…and 19 more