VDB
RHSA-2024%3A0050
RHSA-2024%3A0050
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-installer-artifacts@sha256:2776f2e05bc2186313a88461880dff790eb101813f92bc5b72426b8e07fe9706_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-installer-artifacts@sha256:2776f2e05bc2186313a88461880dff790eb101813f92bc5b72426b8e07fe9706_ppc64le, openshift4/ose-installer-artifacts@sha256:2776f2e05bc2186313a88461880dff790eb101813f92bc5b72426b8e07fe9706_ppc64le, openshift4/ose-installer-artifacts@sha256:2776f2e05bc2186313a88461880dff790eb101813f92bc5b72426b8e07fe9706_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:38b13fe993d40f2fe5f3d6903e4fe3e350fdeb612e24ce0d7a7b120b2bd52737_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-ovn-kubernetes@sha256:38b13fe993d40f2fe5f3d6903e4fe3e350fdeb612e24ce0d7a7b120b2bd52737_amd64, openshift4/ose-ovn-kubernetes@sha256:38b13fe993d40f2fe5f3d6903e4fe3e350fdeb612e24ce0d7a7b120b2bd52737_amd64 |
| Red Hat | openshift4/ose-monitoring-plugin-rhel8@sha256:e4ba39c82f550dc32f32cc37c90cb79337a979475c472e78bcf5b955899f702f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-monitoring-plugin-rhel8@sha256:e4ba39c82f550dc32f32cc37c90cb79337a979475c472e78bcf5b955899f702f_ppc64le, openshift4/ose-monitoring-plugin-rhel8@sha256:e4ba39c82f550dc32f32cc37c90cb79337a979475c472e78bcf5b955899f702f_ppc64le, openshift4/ose-monitoring-plugin-rhel8@sha256:e4ba39c82f550dc32f32cc37c90cb79337a979475c472e78bcf5b955899f702f_ppc64le |
| Red Hat | openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:6806df12984414734b215cc5848272ec9d66f5841238c94cdaee26a37f302f0d_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:6806df12984414734b215cc5848272ec9d66f5841238c94cdaee26a37f302f0d_arm64, openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:6806df12984414734b215cc5848272ec9d66f5841238c94cdaee26a37f302f0d_arm64, openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:6806df12984414734b215cc5848272ec9d66f5841238c94cdaee26a37f302f0d_arm64 |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:8658cfb196b275e39800d2ef85e04b7e4452e62e8e47b3b1f92493085417403f_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:8658cfb196b275e39800d2ef85e04b7e4452e62e8e47b3b1f92493085417403f_amd64, * |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:2a232146194fcf7a16439bf82306a05d3fe4e88849c03fdfcc7f8455ef291ae2_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:2a232146194fcf7a16439bf82306a05d3fe4e88849c03fdfcc7f8455ef291ae2_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:2a232146194fcf7a16439bf82306a05d3fe4e88849c03fdfcc7f8455ef291ae2_s390x, * |
| Red Hat | openshift4/ose-monitoring-plugin-rhel8@sha256:ed236c4369904b05d032e5d97506119165422b1ace7f05ed73ef6c54332978d8_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-monitoring-plugin-rhel8@sha256:ed236c4369904b05d032e5d97506119165422b1ace7f05ed73ef6c54332978d8_s390x, *, openshift4/ose-monitoring-plugin-rhel8@sha256:ed236c4369904b05d032e5d97506119165422b1ace7f05ed73ef6c54332978d8_s390x |
| Red Hat | openshift4/ose-kuryr-controller-rhel8@sha256:6ba20b57eef50f8cee16212722928402d2cf33a59501b9aef38d5be1a745d68e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-kuryr-controller-rhel8@sha256:6ba20b57eef50f8cee16212722928402d2cf33a59501b9aef38d5be1a745d68e_amd64 |
| Red Hat | openshift4/ose-cluster-olm-operator-rhel8@sha256:4ff6a4c14d550e175be639ba46620ffd4e8b88b30f739a51b6f472b5b9457c79_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-olm-operator-rhel8@sha256:4ff6a4c14d550e175be639ba46620ffd4e8b88b30f739a51b6f472b5b9457c79_amd64, openshift4/ose-cluster-olm-operator-rhel8@sha256:4ff6a4c14d550e175be639ba46620ffd4e8b88b30f739a51b6f472b5b9457c79_amd64, * |
| Red Hat | rhcos@sha256:2a48e7cea227836d5214e7d9c52462150ffede207e85a157395f1ebbbb6c57a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | rhcos@sha256:2a48e7cea227836d5214e7d9c52462150ffede207e85a157395f1ebbbb6c57a5_ppc64le, rhcos@sha256:2a48e7cea227836d5214e7d9c52462150ffede207e85a157395f1ebbbb6c57a5_ppc64le, rhcos@sha256:2a48e7cea227836d5214e7d9c52462150ffede207e85a157395f1ebbbb6c57a5_ppc64le |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:61531f9bcdc20a53be61b43bb056788bf3786d15f35170b91cee899ab7cdc9c4_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:61531f9bcdc20a53be61b43bb056788bf3786d15f35170b91cee899ab7cdc9c4_arm64, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:61531f9bcdc20a53be61b43bb056788bf3786d15f35170b91cee899ab7cdc9c4_arm64, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:61531f9bcdc20a53be61b43bb056788bf3786d15f35170b91cee899ab7cdc9c4_arm64 |
| Red Hat | openshift4/ose-monitoring-plugin-rhel8@sha256:0d27f8a4510d7a013d2f5efaf91b4f92e0b4cfa8637e0f4c23b05e9a503389df_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-monitoring-plugin-rhel8@sha256:0d27f8a4510d7a013d2f5efaf91b4f92e0b4cfa8637e0f4c23b05e9a503389df_arm64, *, openshift4/ose-monitoring-plugin-rhel8@sha256:0d27f8a4510d7a013d2f5efaf91b4f92e0b4cfa8637e0f4c23b05e9a503389df_arm64 |
| Red Hat | openshift4/ose-console-operator@sha256:9001d67a5f19f235eba4cb68dd40d8f8fc54583a88906b23a0ba04366549837b_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-console-operator@sha256:9001d67a5f19f235eba4cb68dd40d8f8fc54583a88906b23a0ba04366549837b_arm64, openshift4/ose-console-operator@sha256:9001d67a5f19f235eba4cb68dd40d8f8fc54583a88906b23a0ba04366549837b_arm64, openshift4/ose-console-operator@sha256:9001d67a5f19f235eba4cb68dd40d8f8fc54583a88906b23a0ba04366549837b_arm64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:dd324239c480be2f566ee39e6131e07f53f2977e96fcc938f3d9d1fc3a277846_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-cloud-credential-operator@sha256:dd324239c480be2f566ee39e6131e07f53f2977e96fcc938f3d9d1fc3a277846_ppc64le |
| Red Hat | openshift4/ose-installer@sha256:9e96d157ec629ac79e64f58578d32a0eab840d3c724d347b10d0937a1a81c889_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-installer@sha256:9e96d157ec629ac79e64f58578d32a0eab840d3c724d347b10d0937a1a81c889_amd64, openshift4/ose-installer@sha256:9e96d157ec629ac79e64f58578d32a0eab840d3c724d347b10d0937a1a81c889_amd64, openshift4/ose-installer@sha256:9e96d157ec629ac79e64f58578d32a0eab840d3c724d347b10d0937a1a81c889_amd64 |
| Red Hat | openshift4/ose-olm-operator-controller-rhel8@sha256:f64f23a7697d2949963b60e0c47267a830e9ead134086f2ccd16b1f0af751499_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-olm-operator-controller-rhel8@sha256:f64f23a7697d2949963b60e0c47267a830e9ead134086f2ccd16b1f0af751499_ppc64le, openshift4/ose-olm-operator-controller-rhel8@sha256:f64f23a7697d2949963b60e0c47267a830e9ead134086f2ccd16b1f0af751499_ppc64le |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:e734976cd8c4a8dd000a5111ee59afd0304c0d4e05818cd34e2128849af3c0c2_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-hypershift-rhel8@sha256:e734976cd8c4a8dd000a5111ee59afd0304c0d4e05818cd34e2128849af3c0c2_s390x, *, * |
| Red Hat | openshift4/ose-installer@sha256:9e96d157ec629ac79e64f58578d32a0eab840d3c724d347b10d0937a1a81c889_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/network-tools-rhel8@sha256:9effbe9c30a6ee0855139aec62f34e507e4711305c10c4bb83f51a3a1f1dd9e9_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/network-tools-rhel8@sha256:9effbe9c30a6ee0855139aec62f34e507e4711305c10c4bb83f51a3a1f1dd9e9_s390x, *, openshift4/network-tools-rhel8@sha256:9effbe9c30a6ee0855139aec62f34e507e4711305c10c4bb83f51a3a1f1dd9e9_s390x |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:9ec763b1a6050e4c1c2af16a4e088a6960c5a0ce7a3dc2d1d8b6f5744fac0964_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:9ec763b1a6050e4c1c2af16a4e088a6960c5a0ce7a3dc2d1d8b6f5744fac0964_s390x, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:9ec763b1a6050e4c1c2af16a4e088a6960c5a0ce7a3dc2d1d8b6f5744fac0964_s390x, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:9ec763b1a6050e4c1c2af16a4e088a6960c5a0ce7a3dc2d1d8b6f5744fac0964_s390x |
…and 209 more
Timeline
- Jan 9, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0050 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://issues.redhat.com/browse/OCPBUGS-12720 advisory
- https://issues.redhat.com/browse/OCPBUGS-19884 advisory
- https://issues.redhat.com/browse/OCPBUGS-22267 advisory
- https://issues.redhat.com/browse/OCPBUGS-22771 advisory
- https://issues.redhat.com/browse/OCPBUGS-22787 advisory
- https://issues.redhat.com/browse/OCPBUGS-23771 advisory
- https://issues.redhat.com/browse/OCPBUGS-23968 advisory
- https://issues.redhat.com/browse/OCPBUGS-24281 advisory
- https://issues.redhat.com/browse/OCPBUGS-24320 advisory
- https://issues.redhat.com/browse/OCPBUGS-24346 advisory
- https://issues.redhat.com/browse/OCPBUGS-24349 advisory
- https://issues.redhat.com/browse/OCPBUGS-24474 advisory
- https://issues.redhat.com/browse/OCPBUGS-24489 advisory
- https://issues.redhat.com/browse/OCPBUGS-24627 advisory
- https://issues.redhat.com/browse/OCPBUGS-24664 advisory
…and 19 more