VDB
RHSA-2024%3A0484
RHSA-2024%3A0484
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-machine-api-provider-aws-rhel8@sha256:e068926ad72ff0491c83fa9e0490d8077ef3f02f2d55a6ddcf21c94aa2cfebba_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-machine-api-provider-aws-rhel8@sha256:e068926ad72ff0491c83fa9e0490d8077ef3f02f2d55a6ddcf21c94aa2cfebba_arm64, openshift4/ose-machine-api-provider-aws-rhel8@sha256:e068926ad72ff0491c83fa9e0490d8077ef3f02f2d55a6ddcf21c94aa2cfebba_arm64 |
| Red Hat | openshift4/ose-cluster-capi-operator-container-rhel8@sha256:1337fcb66c6abc8bfbbac459782c50583b3661840e0ce9eac6745ea3f611b20e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-capi-operator-container-rhel8@sha256:1337fcb66c6abc8bfbbac459782c50583b3661840e0ce9eac6745ea3f611b20e_ppc64le, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:1337fcb66c6abc8bfbbac459782c50583b3661840e0ce9eac6745ea3f611b20e_ppc64le, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:1337fcb66c6abc8bfbbac459782c50583b3661840e0ce9eac6745ea3f611b20e_ppc64le |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c17413f6c3539a2496a840ea4245e1c5868754c9894e36ce60beea8dbee37b51_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c17413f6c3539a2496a840ea4245e1c5868754c9894e36ce60beea8dbee37b51_arm64, *, openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c17413f6c3539a2496a840ea4245e1c5868754c9894e36ce60beea8dbee37b51_arm64 |
| Red Hat | openshift4/ose-prometheus-operator@sha256:5c76047d052dd1061d83217343b143fa651b7928655acf74f1bdcc8c7adc08cf_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-operator@sha256:5c76047d052dd1061d83217343b143fa651b7928655acf74f1bdcc8c7adc08cf_s390x, openshift4/ose-prometheus-operator@sha256:5c76047d052dd1061d83217343b143fa651b7928655acf74f1bdcc8c7adc08cf_s390x, openshift4/ose-prometheus-operator@sha256:5c76047d052dd1061d83217343b143fa651b7928655acf74f1bdcc8c7adc08cf_s390x |
| Red Hat | openshift4/ose-cli-artifacts@sha256:2a228393e553d5d0c6c16f792154e0e8f41a2c71549559f4deb6e4f9ad4d4589_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cli-artifacts@sha256:2a228393e553d5d0c6c16f792154e0e8f41a2c71549559f4deb6e4f9ad4d4589_amd64, *, openshift4/ose-cli-artifacts@sha256:2a228393e553d5d0c6c16f792154e0e8f41a2c71549559f4deb6e4f9ad4d4589_amd64 |
| Red Hat | openshift4/ose-docker-builder@sha256:6c7e0f8a8c4cc4e4b2dad6946fe5985ea47ebacb6a6b46e344e84cb752d9cda6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-docker-builder@sha256:6c7e0f8a8c4cc4e4b2dad6946fe5985ea47ebacb6a6b46e344e84cb752d9cda6_arm64, openshift4/ose-docker-builder@sha256:6c7e0f8a8c4cc4e4b2dad6946fe5985ea47ebacb6a6b46e344e84cb752d9cda6_arm64, openshift4/ose-docker-builder@sha256:6c7e0f8a8c4cc4e4b2dad6946fe5985ea47ebacb6a6b46e344e84cb752d9cda6_arm64 |
| Red Hat | openshift4/ose-tests@sha256:dfdb1be83c417cd9a78f853c7389ec529d10bf75eac5503064427835fa793413_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-tests@sha256:dfdb1be83c417cd9a78f853c7389ec529d10bf75eac5503064427835fa793413_s390x, * |
| Red Hat | openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:f89a1aad302075217ee4a874ea61a59f087ea93a9dbecebe20717155f42dd050_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:f89a1aad302075217ee4a874ea61a59f087ea93a9dbecebe20717155f42dd050_ppc64le, openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:f89a1aad302075217ee4a874ea61a59f087ea93a9dbecebe20717155f42dd050_ppc64le |
| Red Hat | openshift4/ose-configmap-reloader@sha256:195dd49ae9da3f79fd2474cfd3e9deeea4d376104dca382a3933478fb6f1f286_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-configmap-reloader@sha256:195dd49ae9da3f79fd2474cfd3e9deeea4d376104dca382a3933478fb6f1f286_ppc64le |
| Red Hat | openshift4/ose-cli@sha256:f2653eeee478cc1fcbb1bf153e9efe252517cda88086cd3d3090723b3ceaec88_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cli@sha256:f2653eeee478cc1fcbb1bf153e9efe252517cda88086cd3d3090723b3ceaec88_s390x, openshift4/ose-cli@sha256:f2653eeee478cc1fcbb1bf153e9efe252517cda88086cd3d3090723b3ceaec88_s390x, openshift4/ose-cli@sha256:f2653eeee478cc1fcbb1bf153e9efe252517cda88086cd3d3090723b3ceaec88_s390x |
| Red Hat | openshift4/ose-tests@sha256:f793a67b7450ecd95b8959c7abd96470d71e9105c89e63d98aa0e1a65b2569a5_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-tests@sha256:f793a67b7450ecd95b8959c7abd96470d71e9105c89e63d98aa0e1a65b2569a5_amd64, openshift4/ose-tests@sha256:f793a67b7450ecd95b8959c7abd96470d71e9105c89e63d98aa0e1a65b2569a5_amd64, openshift4/ose-tests@sha256:f793a67b7450ecd95b8959c7abd96470d71e9105c89e63d98aa0e1a65b2569a5_amd64 |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:e311f1cf6e9bd2f309c23de74aedb69f0dba88b08bce05274bd90f0c91e303f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:e311f1cf6e9bd2f309c23de74aedb69f0dba88b08bce05274bd90f0c91e303f7_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:e311f1cf6e9bd2f309c23de74aedb69f0dba88b08bce05274bd90f0c91e303f7_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:e311f1cf6e9bd2f309c23de74aedb69f0dba88b08bce05274bd90f0c91e303f7_ppc64le |
| Red Hat | openshift4/ose-multus-networkpolicy-rhel8@sha256:ef99da8244e6e00c118311f54603757e2d571374553e7f3449fd0c6b65d63e30_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-multus-networkpolicy-rhel8@sha256:ef99da8244e6e00c118311f54603757e2d571374553e7f3449fd0c6b65d63e30_s390x |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x, *, openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:127668170092fcba9524a3f13ab1e88745cf69dda2ccde8f14e7f42df0d7ad45_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:127668170092fcba9524a3f13ab1e88745cf69dda2ccde8f14e7f42df0d7ad45_amd64, openshift4/driver-toolkit-rhel9@sha256:127668170092fcba9524a3f13ab1e88745cf69dda2ccde8f14e7f42df0d7ad45_amd64, openshift4/driver-toolkit-rhel9@sha256:127668170092fcba9524a3f13ab1e88745cf69dda2ccde8f14e7f42df0d7ad45_amd64 |
| Red Hat | openshift4/ose-docker-registry@sha256:7c4199f32c84d6730f5c40b327a83e6494535197816b747fdf814458e2a0fca3_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-docker-registry@sha256:7c4199f32c84d6730f5c40b327a83e6494535197816b747fdf814458e2a0fca3_s390x, *, * |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x, openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x, openshift4/ose-prometheus-node-exporter@sha256:12df10b4abab789dff65e7eee3f879e84314557b08c6adc2363e4b4557348ea5_s390x |
| Red Hat | openshift4/ose-machine-config-operator@sha256:44b5331c57ec409bc718e835a21931547af67a7a8bc086875bc9c084a6ce99be_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:44b5331c57ec409bc718e835a21931547af67a7a8bc086875bc9c084a6ce99be_arm64, *, * |
| Red Hat | openshift4/ose-ovirt-machine-controllers-rhel8@sha256:dbd1902d0cc9422c845857a4421bb8072325e1de0c1e3fd7dd1b7c7458890e59_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-ovirt-machine-controllers-rhel8@sha256:dbd1902d0cc9422c845857a4421bb8072325e1de0c1e3fd7dd1b7c7458890e59_s390x |
| Red Hat | openshift4/ose-pod@sha256:65d3e5686dd40eddf33fec800e92f3e703c727504c5e1305318d01922fda9140_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-pod@sha256:65d3e5686dd40eddf33fec800e92f3e703c727504c5e1305318d01922fda9140_ppc64le, openshift4/ose-pod@sha256:65d3e5686dd40eddf33fec800e92f3e703c727504c5e1305318d01922fda9140_ppc64le |
…and 1288 more
Timeline
- Feb 1, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0484 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-22272 advisory
- https://issues.redhat.com/browse/OCPBUGS-24419 advisory
- https://issues.redhat.com/browse/OCPBUGS-26423 advisory
- https://issues.redhat.com/browse/OCPBUGS-27049 advisory
- https://issues.redhat.com/browse/OCPBUGS-27172 advisory
- https://issues.redhat.com/browse/OCPBUGS-27233 advisory
- https://issues.redhat.com/browse/OCPBUGS-27367 advisory
- https://issues.redhat.com/browse/OCPBUGS-27370 advisory
- https://issues.redhat.com/browse/OCPBUGS-27416 advisory
- https://issues.redhat.com/browse/OCPBUGS-27754 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0484.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
…and 2 more