VDB
RHSA-2023%3A7827
RHSA-2023%3A7827
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:e900d81d4876888cab0a4ba4bc7225a704a3de69f95acc398204c7c4ad13a1ab_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:e900d81d4876888cab0a4ba4bc7225a704a3de69f95acc398204c7c4ad13a1ab_arm64, openshift4/driver-toolkit-rhel9@sha256:e900d81d4876888cab0a4ba4bc7225a704a3de69f95acc398204c7c4ad13a1ab_arm64, openshift4/driver-toolkit-rhel9@sha256:e900d81d4876888cab0a4ba4bc7225a704a3de69f95acc398204c7c4ad13a1ab_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:764c5b13b2905cf316d3ef0ea98040588255a0a45946accfc9557a00c43a9eb3_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:764c5b13b2905cf316d3ef0ea98040588255a0a45946accfc9557a00c43a9eb3_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:764c5b13b2905cf316d3ef0ea98040588255a0a45946accfc9557a00c43a9eb3_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:764c5b13b2905cf316d3ef0ea98040588255a0a45946accfc9557a00c43a9eb3_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:8eb082343e4eb427201b38b5bc10668185d5ea5811a2d4692a1de5a404163271_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:8eb082343e4eb427201b38b5bc10668185d5ea5811a2d4692a1de5a404163271_arm64, openshift4/network-tools-rhel8@sha256:8eb082343e4eb427201b38b5bc10668185d5ea5811a2d4692a1de5a404163271_arm64, openshift4/network-tools-rhel8@sha256:8eb082343e4eb427201b38b5bc10668185d5ea5811a2d4692a1de5a404163271_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:f17ba0c9f3ed3695cf3a1252dd69a118f68994315b565bc2bc8156dc4ffead74_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1148d3e059a7f28188f99366f8317c84b4c752c8e57a817a429b4adf74adc3fa_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1148d3e059a7f28188f99366f8317c84b4c752c8e57a817a429b4adf74adc3fa_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1148d3e059a7f28188f99366f8317c84b4c752c8e57a817a429b4adf74adc3fa_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1148d3e059a7f28188f99366f8317c84b4c752c8e57a817a429b4adf74adc3fa_s390x |
| Red Hat | openshift4/ose-console-operator@sha256:a028f7aee95bd346cd0d2663d0b8916e872a672e7cfec914241670dd38a83e36_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console-operator@sha256:a028f7aee95bd346cd0d2663d0b8916e872a672e7cfec914241670dd38a83e36_arm64, *, openshift4/ose-console-operator@sha256:a028f7aee95bd346cd0d2663d0b8916e872a672e7cfec914241670dd38a83e36_arm64 |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:4a03666640de7fa4e8788da8291366d920c0b637e9d577fe24e2596eb7df821e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:49932bbb189e6812b46d7a4021081e0023f379df39a3dc34d10fdfd0eaae48ba_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-network-operator@sha256:49932bbb189e6812b46d7a4021081e0023f379df39a3dc34d10fdfd0eaae48ba_arm64, *, * |
| Red Hat | openshift4/ose-deployer@sha256:e3a20beff38ee6dec11ecbcd1ab52beddee892ba353b61c9868d3fe25c49ca5a_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-deployer@sha256:e3a20beff38ee6dec11ecbcd1ab52beddee892ba353b61c9868d3fe25c49ca5a_s390x, openshift4/ose-deployer@sha256:e3a20beff38ee6dec11ecbcd1ab52beddee892ba353b61c9868d3fe25c49ca5a_s390x, * |
| Red Hat | openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:5c5da6cc75dfb489e8dbd9214cab5a513008154c3b16a63a38ad9cafad226f31_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:5c5da6cc75dfb489e8dbd9214cab5a513008154c3b16a63a38ad9cafad226f31_ppc64le, openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:5c5da6cc75dfb489e8dbd9214cab5a513008154c3b16a63a38ad9cafad226f31_ppc64le, openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:5c5da6cc75dfb489e8dbd9214cab5a513008154c3b16a63a38ad9cafad226f31_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4ede03b3a65808249738d7648e8ad0902c71e94029110b0fdb39753d2cdaad65_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4ede03b3a65808249738d7648e8ad0902c71e94029110b0fdb39753d2cdaad65_amd64, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4ede03b3a65808249738d7648e8ad0902c71e94029110b0fdb39753d2cdaad65_amd64, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4ede03b3a65808249738d7648e8ad0902c71e94029110b0fdb39753d2cdaad65_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:764c5b13b2905cf316d3ef0ea98040588255a0a45946accfc9557a00c43a9eb3_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-hyperkube@sha256:298e1438e4441d7515dd42d10e9f494aab3d6d46f3d96c7b15aaf1ed81036189_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d483ce7f4ccca86c3aa40ef3b4a6b1376f61988923216b94746a9913d5c5aaf8_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d483ce7f4ccca86c3aa40ef3b4a6b1376f61988923216b94746a9913d5c5aaf8_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d483ce7f4ccca86c3aa40ef3b4a6b1376f61988923216b94746a9913d5c5aaf8_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d483ce7f4ccca86c3aa40ef3b4a6b1376f61988923216b94746a9913d5c5aaf8_arm64 |
| Red Hat | openshift4/ose-kuryr-controller-rhel8@sha256:308a2ca9eec3425b91bacfb7d3fb0443cb027de585c89792fdbf98eaebfa8f31_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kuryr-controller-rhel8@sha256:308a2ca9eec3425b91bacfb7d3fb0443cb027de585c89792fdbf98eaebfa8f31_ppc64le, openshift4/ose-kuryr-controller-rhel8@sha256:308a2ca9eec3425b91bacfb7d3fb0443cb027de585c89792fdbf98eaebfa8f31_ppc64le, * |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:9cd3c999f552bcf7dc69b0e1e7a2019faaf5ee31e598db216953862536202e3c_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-hypershift-rhel8@sha256:9cd3c999f552bcf7dc69b0e1e7a2019faaf5ee31e598db216953862536202e3c_s390x |
| Red Hat | openshift4/ose-console@sha256:1c899262432a17569c09db0bc2671070d9cc56a3586a900ea8545b5153e9241c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console@sha256:1c899262432a17569c09db0bc2671070d9cc56a3586a900ea8545b5153e9241c_ppc64le, openshift4/ose-console@sha256:1c899262432a17569c09db0bc2671070d9cc56a3586a900ea8545b5153e9241c_ppc64le, openshift4/ose-console@sha256:1c899262432a17569c09db0bc2671070d9cc56a3586a900ea8545b5153e9241c_ppc64le |
| Red Hat | openshift4/ose-pod@sha256:787ca9330c06dec4d0c7ab22808b8b4355cfef30305ae8d9d3f8f10c5a20083a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-pod@sha256:787ca9330c06dec4d0c7ab22808b8b4355cfef30305ae8d9d3f8f10c5a20083a_amd64, *, openshift4/ose-pod@sha256:787ca9330c06dec4d0c7ab22808b8b4355cfef30305ae8d9d3f8f10c5a20083a_amd64 |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:7116e96404995014cbb5eb4fe1aeadc74ca76c8093347989ca4d884ee3e869b8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sdn-rhel8@sha256:7116e96404995014cbb5eb4fe1aeadc74ca76c8093347989ca4d884ee3e869b8_s390x, *, openshift4/ose-sdn-rhel8@sha256:7116e96404995014cbb5eb4fe1aeadc74ca76c8093347989ca4d884ee3e869b8_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:fe3e405717b47be296754c0cda2e2ebbbd1ade0be90006425508362d7916569c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:fe3e405717b47be296754c0cda2e2ebbbd1ade0be90006425508362d7916569c_ppc64le, *, * |
…and 221 more
Timeline
- Jan 4, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7827 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-22241 advisory
- https://issues.redhat.com/browse/OCPBUGS-23014 advisory
- https://issues.redhat.com/browse/OCPBUGS-23468 advisory
- https://issues.redhat.com/browse/OCPBUGS-23521 advisory
- https://issues.redhat.com/browse/OCPBUGS-24277 advisory
- https://issues.redhat.com/browse/OCPBUGS-24461 advisory
- https://issues.redhat.com/browse/OCPBUGS-24591 advisory
- https://issues.redhat.com/browse/OCPBUGS-25146 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2023_7827.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory