VDB

RHSA-2024%3A0290

RHSA-2024%3A0290 PUBLISHED CVSS 7.5 HIGH

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-sdn-rhel8@sha256:a7302d74a42936eeab976e075dcf1b658ce193f6eb0a52e47e25b7b0379d12de_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-sdn-rhel8@sha256:a7302d74a42936eeab976e075dcf1b658ce193f6eb0a52e47e25b7b0379d12de_s390x, openshift4/ose-sdn-rhel8@sha256:a7302d74a42936eeab976e075dcf1b658ce193f6eb0a52e47e25b7b0379d12de_s390x, openshift4/ose-sdn-rhel8@sha256:a7302d74a42936eeab976e075dcf1b658ce193f6eb0a52e47e25b7b0379d12de_s390x
Red Hatopenshift4/ose-cluster-node-tuning-operator@sha256:311bfe75670efba885fbe6d389c7d822b67bb6d1b7535769af9dc8cfe878904a_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-cluster-node-tuning-operator@sha256:311bfe75670efba885fbe6d389c7d822b67bb6d1b7535769af9dc8cfe878904a_arm64
Red Hatopenshift4/ose-prometheus@sha256:63cef6144db2ede8a1b4469297538996a1e8ea3982c48d6661c0a51d59ac5144_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-prometheus@sha256:63cef6144db2ede8a1b4469297538996a1e8ea3982c48d6661c0a51d59ac5144_ppc64le, *, openshift4/ose-prometheus@sha256:63cef6144db2ede8a1b4469297538996a1e8ea3982c48d6661c0a51d59ac5144_ppc64le
Red Hatopenshift4/ose-csi-snapshot-controller@sha256:27ed9d3d0c61db7243a4453856909e86d305900300b9f42e2b4d33e980e5a0ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-snapshot-controller@sha256:27ed9d3d0c61db7243a4453856909e86d305900300b9f42e2b4d33e980e5a0ea_ppc64le, *
Red Hatopenshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6c68dbd751a3e11bb5de76017aa1a22b17347fea811ce20290ea681a15c9e7a5_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6c68dbd751a3e11bb5de76017aa1a22b17347fea811ce20290ea681a15c9e7a5_arm64, *, openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6c68dbd751a3e11bb5de76017aa1a22b17347fea811ce20290ea681a15c9e7a5_arm64
Red Hatopenshift4/ose-agent-installer-orchestrator-rhel8@sha256:479f8a99cbe432551448776965aac1f44501c08aa01539d77ab5976fdbbe1c83_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-agent-installer-orchestrator-rhel8@sha256:479f8a99cbe432551448776965aac1f44501c08aa01539d77ab5976fdbbe1c83_amd64, openshift4/ose-agent-installer-orchestrator-rhel8@sha256:479f8a99cbe432551448776965aac1f44501c08aa01539d77ab5976fdbbe1c83_amd64, openshift4/ose-agent-installer-orchestrator-rhel8@sha256:479f8a99cbe432551448776965aac1f44501c08aa01539d77ab5976fdbbe1c83_amd64
Red Hatopenshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64, *, *
Red Hatopenshift4/ose-prometheus-config-reloader@sha256:c6cb4dc99fe393b5381b9c34f6327ce3a158bc7adb71ed5cc6a7e5d913d1b524_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-prometheus-config-reloader@sha256:c6cb4dc99fe393b5381b9c34f6327ce3a158bc7adb71ed5cc6a7e5d913d1b524_arm64, *
Red Hatopenshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64, openshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64, openshift4/ose-openshift-state-metrics-rhel8@sha256:445e3fa0feb308deca6a5ef576a32c65eb6490954df88267bee355473ecec6be_amd64
Red Hatopenshift4/ose-kube-state-metrics@sha256:81177e249c16c28fcfc2694c705e0903428183e15eda5500e616662956fe221f_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-kube-state-metrics@sha256:81177e249c16c28fcfc2694c705e0903428183e15eda5500e616662956fe221f_arm64, openshift4/ose-kube-state-metrics@sha256:81177e249c16c28fcfc2694c705e0903428183e15eda5500e616662956fe221f_arm64, openshift4/ose-kube-state-metrics@sha256:81177e249c16c28fcfc2694c705e0903428183e15eda5500e616662956fe221f_arm64
Red Hatopenshift4/network-tools-rhel8@sha256:f229ddcbea4dd46f49d9efddfafff50a5fcebf8c5b8a917431b4136e3e0e572f_s390x as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/network-tools-rhel8@sha256:f229ddcbea4dd46f49d9efddfafff50a5fcebf8c5b8a917431b4136e3e0e572f_s390x, *
Red Hatopenshift4/ose-multus-admission-controller@sha256:b13adcaf2831c71a6433ffbda616243fc78e4929ae14acc605a227ec916ff6b9_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-multus-admission-controller@sha256:b13adcaf2831c71a6433ffbda616243fc78e4929ae14acc605a227ec916ff6b9_arm64, openshift4/ose-multus-admission-controller@sha256:b13adcaf2831c71a6433ffbda616243fc78e4929ae14acc605a227ec916ff6b9_arm64, *
Red Hatopenshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:e82fe167a04e00367d1f67d98cf75d42c4a08a1df7888598aac74f6c3559bb9c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:e82fe167a04e00367d1f67d98cf75d42c4a08a1df7888598aac74f6c3559bb9c_ppc64le
Red Hatopenshift4/ose-agent-installer-api-server-rhel8@sha256:1c3713dc35a7904a7928a5203add83e8a229f720348d312a52a522b06fa33de9_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-agent-installer-api-server-rhel8@sha256:1c3713dc35a7904a7928a5203add83e8a229f720348d312a52a522b06fa33de9_arm64, openshift4/ose-agent-installer-api-server-rhel8@sha256:1c3713dc35a7904a7928a5203add83e8a229f720348d312a52a522b06fa33de9_arm64, openshift4/ose-agent-installer-api-server-rhel8@sha256:1c3713dc35a7904a7928a5203add83e8a229f720348d312a52a522b06fa33de9_arm64
Red Hatopenshift4/ose-cluster-openshift-apiserver-operator@sha256:d806bb1e798ea5132de49a977f596af6732e402661dca2e4ab69f71af85c54ec_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-openshift-apiserver-operator@sha256:d806bb1e798ea5132de49a977f596af6732e402661dca2e4ab69f71af85c54ec_arm64, openshift4/ose-cluster-openshift-apiserver-operator@sha256:d806bb1e798ea5132de49a977f596af6732e402661dca2e4ab69f71af85c54ec_arm64, openshift4/ose-cluster-openshift-apiserver-operator@sha256:d806bb1e798ea5132de49a977f596af6732e402661dca2e4ab69f71af85c54ec_arm64
Red Hatopenshift4/ose-azure-file-csi-driver-rhel8@sha256:12a8448129a59131100121b5499b77284f643b4288d827e34e28be85c537e4f7_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-azure-file-csi-driver-rhel8@sha256:12a8448129a59131100121b5499b77284f643b4288d827e34e28be85c537e4f7_arm64, openshift4/ose-azure-file-csi-driver-rhel8@sha256:12a8448129a59131100121b5499b77284f643b4288d827e34e28be85c537e4f7_arm64, openshift4/ose-azure-file-csi-driver-rhel8@sha256:12a8448129a59131100121b5499b77284f643b4288d827e34e28be85c537e4f7_arm64
Red Hatopenshift4/ovirt-csi-driver-rhel7@sha256:811c2837eb9c0c2f035d9cd4010af21482e4fc757ac7923d8e69e30d11e9cd92_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ovirt-csi-driver-rhel7@sha256:811c2837eb9c0c2f035d9cd4010af21482e4fc757ac7923d8e69e30d11e9cd92_amd64, *
Red Hatopenshift4/ose-baremetal-rhel8-operator@sha256:da930b6970c625983e183941e3b085d58ef1bd12c1ac83f50f4a144896840fe9_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-baremetal-rhel8-operator@sha256:da930b6970c625983e183941e3b085d58ef1bd12c1ac83f50f4a144896840fe9_ppc64le
Red Hatopenshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:60779d74a408464599dc0e439c2f440af591abfce8c703b6cc2003a54a672aa8_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:60779d74a408464599dc0e439c2f440af591abfce8c703b6cc2003a54a672aa8_amd64
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:de3899c26568dc01880d1ca62a5f1b1898ef1c20c2d584cbd38d99a7373c0ef5_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:de3899c26568dc01880d1ca62a5f1b1898ef1c20c2d584cbd38d99a7373c0ef5_arm64, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:de3899c26568dc01880d1ca62a5f1b1898ef1c20c2d584cbd38d99a7373c0ef5_arm64

…and 1347 more

Timeline

  • Jan 23, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 21, 2026 CVE Updated

References

…and 10 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›