VDB
RHSA-2023%3A7687
RHSA-2023%3A7687
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-machine-config-operator@sha256:836ac1685bf60cf607784380080ca6b777759dd2859d0ed9bc58db454a7b6638_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:836ac1685bf60cf607784380080ca6b777759dd2859d0ed9bc58db454a7b6638_arm64, *, * |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:6e17de2ba14647ce67c92b3331eafeccb6aefe8874bcaca6e118a4403b058ea2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:6e17de2ba14647ce67c92b3331eafeccb6aefe8874bcaca6e118a4403b058ea2_ppc64le, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:6e17de2ba14647ce67c92b3331eafeccb6aefe8874bcaca6e118a4403b058ea2_ppc64le, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:6e17de2ba14647ce67c92b3331eafeccb6aefe8874bcaca6e118a4403b058ea2_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:8ff987d26336520d84f2e55bd4af2f88a3f660b98fc3b1a5ec8bee7daaa40222_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:8ff987d26336520d84f2e55bd4af2f88a3f660b98fc3b1a5ec8bee7daaa40222_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:8ff987d26336520d84f2e55bd4af2f88a3f660b98fc3b1a5ec8bee7daaa40222_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:8ff987d26336520d84f2e55bd4af2f88a3f660b98fc3b1a5ec8bee7daaa40222_ppc64le |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:408f99eeea797688f019ae48d1146d2aafdc617f03333f738d965bdf0ccf9f13_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:408f99eeea797688f019ae48d1146d2aafdc617f03333f738d965bdf0ccf9f13_ppc64le, *, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:408f99eeea797688f019ae48d1146d2aafdc617f03333f738d965bdf0ccf9f13_ppc64le |
| Red Hat | openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:7cfd5caded4ef20ed789ebc8eabe10aae320ac73736125a9c114019491e64448_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:7cfd5caded4ef20ed789ebc8eabe10aae320ac73736125a9c114019491e64448_s390x |
| Red Hat | openshift4/ose-machine-api-operator@sha256:cdceceb37ba9ab02983863894030da6e3e6882f4080611a8f3cec1778a7bfdf4_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-api-operator@sha256:cdceceb37ba9ab02983863894030da6e3e6882f4080611a8f3cec1778a7bfdf4_arm64, openshift4/ose-machine-api-operator@sha256:cdceceb37ba9ab02983863894030da6e3e6882f4080611a8f3cec1778a7bfdf4_arm64, openshift4/ose-machine-api-operator@sha256:cdceceb37ba9ab02983863894030da6e3e6882f4080611a8f3cec1778a7bfdf4_arm64 |
| Red Hat | openshift4/ose-hyperkube@sha256:171472cbdf0fcbaa145691078ab1905261fba7a24881e5e6ae590ac8165e8e3a_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-hyperkube@sha256:171472cbdf0fcbaa145691078ab1905261fba7a24881e5e6ae590ac8165e8e3a_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:3e7f655cbab67b833482679058a40e243179297888d0b8ad71f57c9f53fa670e_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-ovn-kubernetes-rhel9@sha256:3e7f655cbab67b833482679058a40e243179297888d0b8ad71f57c9f53fa670e_arm64 |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:961ace293bf966e03d432c5fe0f0d3e5b000fea960a755cea11fda1dd2b4a74e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:961ace293bf966e03d432c5fe0f0d3e5b000fea960a755cea11fda1dd2b4a74e_amd64, *, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:961ace293bf966e03d432c5fe0f0d3e5b000fea960a755cea11fda1dd2b4a74e_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:a2b8f25c021d0feba692fe04a0e485a3406482c1730dee41b859b2458388067f_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:a2b8f25c021d0feba692fe04a0e485a3406482c1730dee41b859b2458388067f_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:a2b8f25c021d0feba692fe04a0e485a3406482c1730dee41b859b2458388067f_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:a2b8f25c021d0feba692fe04a0e485a3406482c1730dee41b859b2458388067f_s390x |
| Red Hat | openshift4/ose-console@sha256:d8a3620411240d33e8923fa3cfa51bfc7db3c4d87d9bbb1a3460bc68f61f56be_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console@sha256:d8a3620411240d33e8923fa3cfa51bfc7db3c4d87d9bbb1a3460bc68f61f56be_amd64, *, openshift4/ose-console@sha256:d8a3620411240d33e8923fa3cfa51bfc7db3c4d87d9bbb1a3460bc68f61f56be_amd64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:1149bbb24a44601cf9a64879e592eb1559b8626a08fbbc2d855c474b0ab3350b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:1149bbb24a44601cf9a64879e592eb1559b8626a08fbbc2d855c474b0ab3350b_amd64, openshift4/ose-machine-config-operator@sha256:1149bbb24a44601cf9a64879e592eb1559b8626a08fbbc2d855c474b0ab3350b_amd64, openshift4/ose-machine-config-operator@sha256:1149bbb24a44601cf9a64879e592eb1559b8626a08fbbc2d855c474b0ab3350b_amd64 |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:464fd072dab1e1cf7e87d41c667f31592a64dc2af9b9c7b088d7c8d41055d0b6_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-pod@sha256:4232e65758ca8449e6e2bf9d861e906156c5396ed606aad8732469c7740c827b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-pod@sha256:4232e65758ca8449e6e2bf9d861e906156c5396ed606aad8732469c7740c827b_amd64, *, * |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:48c9c1b2069a0ecc4a7f5f1bdde41be7b3d8088a5cccca1d843c82e670fa1ba8_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hypershift-rhel8@sha256:48c9c1b2069a0ecc4a7f5f1bdde41be7b3d8088a5cccca1d843c82e670fa1ba8_amd64, *, openshift4/ose-hypershift-rhel8@sha256:48c9c1b2069a0ecc4a7f5f1bdde41be7b3d8088a5cccca1d843c82e670fa1ba8_amd64 |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:d4d524b4f84ebebc9f13805b0a2ad3a5d7280e23188d656265e9f3a95ff85f23_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:24469931fe23b851e812508f683922e3c118127d0bce5fbac28ca4c2305039f6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:24469931fe23b851e812508f683922e3c118127d0bce5fbac28ca4c2305039f6_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:24469931fe23b851e812508f683922e3c118127d0bce5fbac28ca4c2305039f6_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:24469931fe23b851e812508f683922e3c118127d0bce5fbac28ca4c2305039f6_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:564a94549dad9ff2a0347140a11ecd25dfa4939ba8b7302fcb748f926739ee69_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:564a94549dad9ff2a0347140a11ecd25dfa4939ba8b7302fcb748f926739ee69_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:564a94549dad9ff2a0347140a11ecd25dfa4939ba8b7302fcb748f926739ee69_ppc64le |
| Red Hat | openshift4/network-tools-rhel8@sha256:d896d49b3ad7a06348fb4c901a43e57106d8964e6b7a6c41cbc51a591a693ce5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/network-tools-rhel8@sha256:d896d49b3ad7a06348fb4c901a43e57106d8964e6b7a6c41cbc51a591a693ce5_s390x, openshift4/network-tools-rhel8@sha256:d896d49b3ad7a06348fb4c901a43e57106d8964e6b7a6c41cbc51a591a693ce5_s390x |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel8@sha256:9111bf8e1272fd77d44db6ca15c4c7c82df530dbd651f6c0b880dc06b2259b15_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-node-agent-rhel8@sha256:9111bf8e1272fd77d44db6ca15c4c7c82df530dbd651f6c0b880dc06b2259b15_s390x, openshift4/ose-agent-installer-node-agent-rhel8@sha256:9111bf8e1272fd77d44db6ca15c4c7c82df530dbd651f6c0b880dc06b2259b15_s390x, * |
…and 133 more
Timeline
- Dec 13, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7687 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-22997 advisory
- https://issues.redhat.com/browse/OCPBUGS-23497 advisory
- https://issues.redhat.com/browse/OCPBUGS-23567 advisory
- https://issues.redhat.com/browse/OCPBUGS-23978 advisory
- https://issues.redhat.com/browse/OCPBUGS-24240 advisory
- https://issues.redhat.com/browse/OCPBUGS-24263 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7687.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803 issue
- https://www.cve.org/CVERecord?id=CVE-2023-44487 advisory
…and 4 more