VDB
RHSA-2024%3A0059
RHSA-2024%3A0059
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/network-tools-rhel8@sha256:916f57aaf945d9d4ce8e38a4373184749ed9cf0178fef4002cc80cde7e3b43cf_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:ed97e1bdc18d564799665873c024b963cefba149fba9918bfed73cd14bf1dcb0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:ed97e1bdc18d564799665873c024b963cefba149fba9918bfed73cd14bf1dcb0_ppc64le, openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:ed97e1bdc18d564799665873c024b963cefba149fba9918bfed73cd14bf1dcb0_ppc64le, openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:ed97e1bdc18d564799665873c024b963cefba149fba9918bfed73cd14bf1dcb0_ppc64le |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:f3cdaee6b135a52c35955cfcf13a0065985ee21119d4b5ea9fcc01179b675630_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:f3cdaee6b135a52c35955cfcf13a0065985ee21119d4b5ea9fcc01179b675630_amd64, *, openshift4/ose-cluster-node-tuning-operator@sha256:f3cdaee6b135a52c35955cfcf13a0065985ee21119d4b5ea9fcc01179b675630_amd64 |
| Red Hat | openshift4/ose-machine-api-operator@sha256:bfe7728be9f3f1932bff85265448243849d600812f0851a01fd52ab0bc620dbb_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-machine-api-operator@sha256:bfe7728be9f3f1932bff85265448243849d600812f0851a01fd52ab0bc620dbb_ppc64le, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:809837c8ec9da235815e517bccad2f448f800732493873d4b369e9c0ee8540a9_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-cluster-node-tuning-operator@sha256:809837c8ec9da235815e517bccad2f448f800732493873d4b369e9c0ee8540a9_arm64, * |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:80357e14894cdb81bcfac2f601a3b9cf399e3895d8daa8705ce284e16671f704_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-cluster-autoscaler-operator@sha256:80357e14894cdb81bcfac2f601a3b9cf399e3895d8daa8705ce284e16671f704_arm64, openshift4/ose-cluster-autoscaler-operator@sha256:80357e14894cdb81bcfac2f601a3b9cf399e3895d8daa8705ce284e16671f704_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:8f91a1c86fc33c81de5f79050ad6df71f1ab95548579ffb3d28cc1b76cc6b315_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:8f91a1c86fc33c81de5f79050ad6df71f1ab95548579ffb3d28cc1b76cc6b315_arm64, *, * |
| Red Hat | openshift4/ose-tools-rhel8@sha256:ebde6590ec8f04dc00a2c7e8f4dcf012e00f7b79fe7b2641c315fc154293b2da_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tools-rhel8@sha256:ebde6590ec8f04dc00a2c7e8f4dcf012e00f7b79fe7b2641c315fc154293b2da_arm64, openshift4/ose-tools-rhel8@sha256:ebde6590ec8f04dc00a2c7e8f4dcf012e00f7b79fe7b2641c315fc154293b2da_arm64, openshift4/ose-tools-rhel8@sha256:ebde6590ec8f04dc00a2c7e8f4dcf012e00f7b79fe7b2641c315fc154293b2da_arm64 |
| Red Hat | openshift4/network-tools-rhel8@sha256:e9ea92bacbe0fbcdb37e951740582f52f994666e51d786796b5685cfd51a650a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/network-tools-rhel8@sha256:e9ea92bacbe0fbcdb37e951740582f52f994666e51d786796b5685cfd51a650a_ppc64le, *, * |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:a9f7b8c95920803a401e3e1cae6404b65f5e2a4777ff5e083b38349abbcc0fa2_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:a9f7b8c95920803a401e3e1cae6404b65f5e2a4777ff5e083b38349abbcc0fa2_amd64, openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:a9f7b8c95920803a401e3e1cae6404b65f5e2a4777ff5e083b38349abbcc0fa2_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:a09e3e948f8da17e668143672bcbe86f3f99d2cf34c89655eb785062ca92e798_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:a09e3e948f8da17e668143672bcbe86f3f99d2cf34c89655eb785062ca92e798_ppc64le, *, openshift4/ose-cluster-node-tuning-operator@sha256:a09e3e948f8da17e668143672bcbe86f3f99d2cf34c89655eb785062ca92e798_ppc64le |
| Red Hat | openshift4/ose-machine-api-operator@sha256:afe8933a6e3006b23ec7cd9685cc16e3460d84447a5e0d4f613d0ecf101ca1d8_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:f094ecc61ed6116967ee5534a45db95147a5b93206effce2d78ae9f5d3cfbca5_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-machine-approver@sha256:f094ecc61ed6116967ee5534a45db95147a5b93206effce2d78ae9f5d3cfbca5_s390x, openshift4/ose-cluster-machine-approver@sha256:f094ecc61ed6116967ee5534a45db95147a5b93206effce2d78ae9f5d3cfbca5_s390x, openshift4/ose-cluster-machine-approver@sha256:f094ecc61ed6116967ee5534a45db95147a5b93206effce2d78ae9f5d3cfbca5_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:4003789b18e6ab72479aa16a16960c42479b0f128a45a5cdb5d283d55b7584e7_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/network-tools-rhel8@sha256:4003789b18e6ab72479aa16a16960c42479b0f128a45a5cdb5d283d55b7584e7_arm64 |
| Red Hat | openshift4/ose-machine-api-operator@sha256:bfe7728be9f3f1932bff85265448243849d600812f0851a01fd52ab0bc620dbb_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-machine-api-operator@sha256:bfe7728be9f3f1932bff85265448243849d600812f0851a01fd52ab0bc620dbb_ppc64le |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:c87163a4a92f9ff786a17cd9ed26bb8774055e8fd7985dbe858029bb5c27baf3_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:c87163a4a92f9ff786a17cd9ed26bb8774055e8fd7985dbe858029bb5c27baf3_arm64 |
| Red Hat | openshift4/ose-tests@sha256:4065c366947371171bb7aeeb843bfec75b2cf04a47fb950d96e442cd00bfae44_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tests@sha256:4065c366947371171bb7aeeb843bfec75b2cf04a47fb950d96e442cd00bfae44_amd64, openshift4/ose-tests@sha256:4065c366947371171bb7aeeb843bfec75b2cf04a47fb950d96e442cd00bfae44_amd64, openshift4/ose-tests@sha256:4065c366947371171bb7aeeb843bfec75b2cf04a47fb950d96e442cd00bfae44_amd64 |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:648a25174f54f1ade0237ce7c4374007d040b71c76665582f81b78e55729c92e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-network-operator@sha256:648a25174f54f1ade0237ce7c4374007d040b71c76665582f81b78e55729c92e_arm64, openshift4/ose-cluster-network-operator@sha256:648a25174f54f1ade0237ce7c4374007d040b71c76665582f81b78e55729c92e_arm64, openshift4/ose-cluster-network-operator@sha256:648a25174f54f1ade0237ce7c4374007d040b71c76665582f81b78e55729c92e_arm64 |
| Red Hat | openshift4/ose-tests@sha256:e21e565c7eb57f7a818dce6d1a2d4e5fa03842b1399b1391980815c4cfbb4652_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tests@sha256:e21e565c7eb57f7a818dce6d1a2d4e5fa03842b1399b1391980815c4cfbb4652_ppc64le, openshift4/ose-tests@sha256:e21e565c7eb57f7a818dce6d1a2d4e5fa03842b1399b1391980815c4cfbb4652_ppc64le, openshift4/ose-tests@sha256:e21e565c7eb57f7a818dce6d1a2d4e5fa03842b1399b1391980815c4cfbb4652_ppc64le |
…and 123 more
Timeline
- Jan 10, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0059 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-25377 advisory
- https://issues.redhat.com/browse/OCPBUGS-25711 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0059.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory