VDB
RHSA-2024%3A0306
RHSA-2024%3A0306
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-openshift-controller-manager-rhel8@sha256:8f40ff3d1ed3646b47cd49845cc3259e56b8233a9cf1da9ceeca316bdbfcc597_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-openshift-controller-manager-rhel8@sha256:8f40ff3d1ed3646b47cd49845cc3259e56b8233a9cf1da9ceeca316bdbfcc597_s390x, * |
| Red Hat | openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:9de58cad6a134f1b3209191d92c98ae47b5106a0dc618f7894be35c4563172cc_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:9de58cad6a134f1b3209191d92c98ae47b5106a0dc618f7894be35c4563172cc_amd64, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:9de58cad6a134f1b3209191d92c98ae47b5106a0dc618f7894be35c4563172cc_amd64 |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel8@sha256:ff50ad8ad4af0c4c00a3717bf05fe80e6e3a3de4c87bf7865f9b6e364c3fb098_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-multus-route-override-cni-rhel8@sha256:ff50ad8ad4af0c4c00a3717bf05fe80e6e3a3de4c87bf7865f9b6e364c3fb098_ppc64le, *, * |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:fc0c1ebac229cdcdc2a96dc4a8352ce8f9d359de7474150587b7ac3a69a000e8_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/egress-router-cni-rhel8@sha256:fc0c1ebac229cdcdc2a96dc4a8352ce8f9d359de7474150587b7ac3a69a000e8_arm64, * |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:87733f3aed68cf4de379ee550fe1cdc89ef97df1b0678212da4629d361d4b326_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-prometheus-node-exporter@sha256:87733f3aed68cf4de379ee550fe1cdc89ef97df1b0678212da4629d361d4b326_amd64, openshift4/ose-prometheus-node-exporter@sha256:87733f3aed68cf4de379ee550fe1cdc89ef97df1b0678212da4629d361d4b326_amd64, * |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:1b0f93b43065c2b5e6c88e672376e1759baa90823c512fcee70563d5332280e5_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-prom-label-proxy@sha256:1b0f93b43065c2b5e6c88e672376e1759baa90823c512fcee70563d5332280e5_ppc64le, openshift4/ose-prom-label-proxy@sha256:1b0f93b43065c2b5e6c88e672376e1759baa90823c512fcee70563d5332280e5_ppc64le, openshift4/ose-prom-label-proxy@sha256:1b0f93b43065c2b5e6c88e672376e1759baa90823c512fcee70563d5332280e5_ppc64le |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:c1f0f5ce36e308b9a62aa5610508ce45185407e9d93f9c022d7c37b0ca224565_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cloud-credential-operator@sha256:c1f0f5ce36e308b9a62aa5610508ce45185407e9d93f9c022d7c37b0ca224565_ppc64le, openshift4/ose-cloud-credential-operator@sha256:c1f0f5ce36e308b9a62aa5610508ce45185407e9d93f9c022d7c37b0ca224565_ppc64le, openshift4/ose-cloud-credential-operator@sha256:c1f0f5ce36e308b9a62aa5610508ce45185407e9d93f9c022d7c37b0ca224565_ppc64le |
| Red Hat | openshift4/ose-oauth-proxy@sha256:2ee09a7d77f951ca77c0b7fc98f9703dc867c0e07f1a1d56d6c1323d07a826e6_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-oauth-proxy@sha256:2ee09a7d77f951ca77c0b7fc98f9703dc867c0e07f1a1d56d6c1323d07a826e6_arm64, openshift4/ose-oauth-proxy@sha256:2ee09a7d77f951ca77c0b7fc98f9703dc867c0e07f1a1d56d6c1323d07a826e6_arm64 |
| Red Hat | openshift4/ose-operator-registry@sha256:997c1180aa2841b693a24c05a4746c004586b696060a0e5b82e28b3b3a326d55_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-registry@sha256:997c1180aa2841b693a24c05a4746c004586b696060a0e5b82e28b3b3a326d55_ppc64le, *, openshift4/ose-operator-registry@sha256:997c1180aa2841b693a24c05a4746c004586b696060a0e5b82e28b3b3a326d55_ppc64le |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:88e3205995b553caa51351abdb7e0a42d9753b33e7990e2bd5d21eb7ba499118_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-prom-label-proxy@sha256:88e3205995b553caa51351abdb7e0a42d9753b33e7990e2bd5d21eb7ba499118_amd64, openshift4/ose-prom-label-proxy@sha256:88e3205995b553caa51351abdb7e0a42d9753b33e7990e2bd5d21eb7ba499118_amd64, openshift4/ose-prom-label-proxy@sha256:88e3205995b553caa51351abdb7e0a42d9753b33e7990e2bd5d21eb7ba499118_amd64 |
| Red Hat | openshift4/ose-vsphere-problem-detector-rhel8@sha256:c936e9a381e70bd8c47715efe459ed4c4e4154f82a658e54a748d90c3dbd553f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-vsphere-problem-detector-rhel8@sha256:c936e9a381e70bd8c47715efe459ed4c4e4154f82a658e54a748d90c3dbd553f_amd64, openshift4/ose-vsphere-problem-detector-rhel8@sha256:c936e9a381e70bd8c47715efe459ed4c4e4154f82a658e54a748d90c3dbd553f_amd64, openshift4/ose-vsphere-problem-detector-rhel8@sha256:c936e9a381e70bd8c47715efe459ed4c4e4154f82a658e54a748d90c3dbd553f_amd64 |
| Red Hat | openshift4/ose-ironic-rhel8@sha256:57b8b8ab30cf43cfd8cfdf97d6fe10ffcd2be7efcadb4ae54dd78e4ab7ff08bb_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-ironic-rhel8@sha256:57b8b8ab30cf43cfd8cfdf97d6fe10ffcd2be7efcadb4ae54dd78e4ab7ff08bb_arm64 |
| Red Hat | openshift4/ose-service-ca-operator@sha256:2c4df1516e8b4c92df450a91d55f26408cf3466a358ddeb5bf758c7aeb62add3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-service-ca-operator@sha256:2c4df1516e8b4c92df450a91d55f26408cf3466a358ddeb5bf758c7aeb62add3_ppc64le, *, openshift4/ose-service-ca-operator@sha256:2c4df1516e8b4c92df450a91d55f26408cf3466a358ddeb5bf758c7aeb62add3_ppc64le |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:a5419e8c7ce08881009f175a24f92c7f8301caecd24f1119b1faa62a8bcb126e_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-bootstrap@sha256:a5419e8c7ce08881009f175a24f92c7f8301caecd24f1119b1faa62a8bcb126e_amd64, *, openshift4/ose-cluster-bootstrap@sha256:a5419e8c7ce08881009f175a24f92c7f8301caecd24f1119b1faa62a8bcb126e_amd64 |
| Red Hat | openshift4/ose-oauth-proxy@sha256:109d297d9876857e3e10c65f9d5d25adb37a0d2ecf3959d6e65cf086d1ff15bf_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-oauth-proxy@sha256:109d297d9876857e3e10c65f9d5d25adb37a0d2ecf3959d6e65cf086d1ff15bf_s390x, openshift4/ose-oauth-proxy@sha256:109d297d9876857e3e10c65f9d5d25adb37a0d2ecf3959d6e65cf086d1ff15bf_s390x, openshift4/ose-oauth-proxy@sha256:109d297d9876857e3e10c65f9d5d25adb37a0d2ecf3959d6e65cf086d1ff15bf_s390x |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:6a5e0cf9d1a61ed0c9095fea028418b79b792949c031ce65230628052d61295e_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:6a5e0cf9d1a61ed0c9095fea028418b79b792949c031ce65230628052d61295e_amd64, *, openshift4/driver-toolkit-rhel8@sha256:6a5e0cf9d1a61ed0c9095fea028418b79b792949c031ce65230628052d61295e_amd64 |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:931af0e48085b266aab144ca0afd44f63f2cb76b860a615d920f0ae6d1e320fa_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/cloud-network-config-controller-rhel8@sha256:931af0e48085b266aab144ca0afd44f63f2cb76b860a615d920f0ae6d1e320fa_arm64, *, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:810dc08166a357b1b75006a03c43706392a545d1be7a89add9a86191452d405b_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:810dc08166a357b1b75006a03c43706392a545d1be7a89add9a86191452d405b_arm64, *, * |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:4864bd95b1d428135b6e6f89c0bd14fa0d824555e9415cd6736500a0564440bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:4864bd95b1d428135b6e6f89c0bd14fa0d824555e9415cd6736500a0564440bd_ppc64le, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:4864bd95b1d428135b6e6f89c0bd14fa0d824555e9415cd6736500a0564440bd_ppc64le, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:4864bd95b1d428135b6e6f89c0bd14fa0d824555e9415cd6736500a0564440bd_ppc64le |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:ed6a282b953dd4bbc1084844757d4f00e9fa478c715c26c1695af8749cccab03_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-csi-snapshot-controller-rhel8@sha256:ed6a282b953dd4bbc1084844757d4f00e9fa478c715c26c1695af8749cccab03_s390x, openshift4/ose-csi-snapshot-controller-rhel8@sha256:ed6a282b953dd4bbc1084844757d4f00e9fa478c715c26c1695af8749cccab03_s390x |
…and 1210 more
Timeline
- Jan 24, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0306 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-23321 advisory
- https://issues.redhat.com/browse/OCPBUGS-25304 advisory
- https://issues.redhat.com/browse/OCPBUGS-26599 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0306.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory