VDB
RHSA-2024%3A0660
RHSA-2024%3A0660
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-driver-manila-rhel8-operator@sha256:6c708a14ca39889876171a20eaa1876a62246d311ffa3a385530c433868515cb_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-manila-rhel8-operator@sha256:6c708a14ca39889876171a20eaa1876a62246d311ffa3a385530c433868515cb_ppc64le, openshift4/ose-csi-driver-manila-rhel8-operator@sha256:6c708a14ca39889876171a20eaa1876a62246d311ffa3a385530c433868515cb_ppc64le, openshift4/ose-csi-driver-manila-rhel8-operator@sha256:6c708a14ca39889876171a20eaa1876a62246d311ffa3a385530c433868515cb_ppc64le |
| Red Hat | openshift4/ose-cluster-version-operator@sha256:49293161b3854129083f35d770b3f02e90b6efbf4771e9ae4a38b5e0d164bbac_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-version-operator@sha256:49293161b3854129083f35d770b3f02e90b6efbf4771e9ae4a38b5e0d164bbac_s390x, openshift4/ose-cluster-version-operator@sha256:49293161b3854129083f35d770b3f02e90b6efbf4771e9ae4a38b5e0d164bbac_s390x, openshift4/ose-cluster-version-operator@sha256:49293161b3854129083f35d770b3f02e90b6efbf4771e9ae4a38b5e0d164bbac_s390x |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:ea359125d28f24594bf1c320c8c4155d0639c8ebdc67197c1a70dca5aca23ec0_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-multus-admission-controller@sha256:ea359125d28f24594bf1c320c8c4155d0639c8ebdc67197c1a70dca5aca23ec0_arm64, openshift4/ose-multus-admission-controller@sha256:ea359125d28f24594bf1c320c8c4155d0639c8ebdc67197c1a70dca5aca23ec0_arm64, openshift4/ose-multus-admission-controller@sha256:ea359125d28f24594bf1c320c8c4155d0639c8ebdc67197c1a70dca5aca23ec0_arm64 |
| Red Hat | openshift4/ose-keepalived-ipfailover@sha256:1b3c0dda738421203129916e2e6372f6ef947ed5fae0dde6fa6e7864857a7e3c_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-keepalived-ipfailover@sha256:1b3c0dda738421203129916e2e6372f6ef947ed5fae0dde6fa6e7864857a7e3c_s390x, openshift4/ose-keepalived-ipfailover@sha256:1b3c0dda738421203129916e2e6372f6ef947ed5fae0dde6fa6e7864857a7e3c_s390x |
| Red Hat | openshift4/kubevirt-csi-driver-rhel8@sha256:8d1985daec324abb221940527918e198dda60e15b78f7aae1e015c18cf3bb038_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-olm-rukpak-rhel8@sha256:2bd0b4f436e2e0b839fffa21c8fce22b51ee6923b83a043ea73c322ed345816c_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cli@sha256:96854db1d6ef87f8fd2d7e6028e1e6522cfd7c305610e8d53469abafb8f35758_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cli@sha256:96854db1d6ef87f8fd2d7e6028e1e6522cfd7c305610e8d53469abafb8f35758_arm64, *, openshift4/ose-cli@sha256:96854db1d6ef87f8fd2d7e6028e1e6522cfd7c305610e8d53469abafb8f35758_arm64 |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:e5e21f69f9f3cc73199ac6c2f0319da4396b93bc97e9d744aeda8e75c73cb80f_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-external-attacher@sha256:e5e21f69f9f3cc73199ac6c2f0319da4396b93bc97e9d744aeda8e75c73cb80f_arm64, *, * |
| Red Hat | openshift4/ose-network-interface-bond-cni-rhel8@sha256:e6d20098cca55e707d642c3c25d804a902eef3fbd9bf2abe26852ee2208d639c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-network-interface-bond-cni-rhel8@sha256:e6d20098cca55e707d642c3c25d804a902eef3fbd9bf2abe26852ee2208d639c_ppc64le, openshift4/ose-network-interface-bond-cni-rhel8@sha256:e6d20098cca55e707d642c3c25d804a902eef3fbd9bf2abe26852ee2208d639c_ppc64le, openshift4/ose-network-interface-bond-cni-rhel8@sha256:e6d20098cca55e707d642c3c25d804a902eef3fbd9bf2abe26852ee2208d639c_ppc64le |
| Red Hat | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:faeb4765e782b268b930dc16e9d5fe943376d75acd597969f0bceebf67b7ce5e_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-azure-disk-csi-driver-rhel8@sha256:faeb4765e782b268b930dc16e9d5fe943376d75acd597969f0bceebf67b7ce5e_arm64, *, * |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:1547977b28fe8b889702155b7c534a820217d288c2e773e405055f35c46d2db9_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-ingress-operator@sha256:1547977b28fe8b889702155b7c534a820217d288c2e773e405055f35c46d2db9_ppc64le, openshift4/ose-cluster-ingress-operator@sha256:1547977b28fe8b889702155b7c534a820217d288c2e773e405055f35c46d2db9_ppc64le |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:6f2163b71157a6c460325d81f49130029f8289a55331182793ddd096b05536c8_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:6f2163b71157a6c460325d81f49130029f8289a55331182793ddd096b05536c8_arm64, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:6f2163b71157a6c460325d81f49130029f8289a55331182793ddd096b05536c8_arm64 |
| Red Hat | openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:5bc9f9e95faaf253980107f7bf3de42ec8b200bf1e7bda38114305307b0a535e_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:5bc9f9e95faaf253980107f7bf3de42ec8b200bf1e7bda38114305307b0a535e_s390x, openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:5bc9f9e95faaf253980107f7bf3de42ec8b200bf1e7bda38114305307b0a535e_s390x, openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:5bc9f9e95faaf253980107f7bf3de42ec8b200bf1e7bda38114305307b0a535e_s390x |
| Red Hat | openshift4/ose-configmap-reloader@sha256:9a74770c2b69910eb26ddac0abdd13cd4067f1d856f027a1a17f925f0b0c85c6_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-configmap-reloader@sha256:9a74770c2b69910eb26ddac0abdd13cd4067f1d856f027a1a17f925f0b0c85c6_s390x, openshift4/ose-configmap-reloader@sha256:9a74770c2b69910eb26ddac0abdd13cd4067f1d856f027a1a17f925f0b0c85c6_s390x |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:c04bf6405a6c5da8b20afc065bd6fa332dd5d70ae8f67ebc56e1576be32cf255_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cloud-credential-operator@sha256:c04bf6405a6c5da8b20afc065bd6fa332dd5d70ae8f67ebc56e1576be32cf255_arm64, *, openshift4/ose-cloud-credential-operator@sha256:c04bf6405a6c5da8b20afc065bd6fa332dd5d70ae8f67ebc56e1576be32cf255_arm64 |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:459f4cbe8443c8c03d2b84f726256f66a1c8bb49a23cfadfa09e770c438ccd5b_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:459f4cbe8443c8c03d2b84f726256f66a1c8bb49a23cfadfa09e770c438ccd5b_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:459f4cbe8443c8c03d2b84f726256f66a1c8bb49a23cfadfa09e770c438ccd5b_ppc64le |
| Red Hat | openshift4/ose-csi-external-resizer-rhel8@sha256:89f6d711f46c3ed51f15d201b97860854a0e286083903dc94aeeec42acec85f8_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-csi-external-resizer-rhel8@sha256:89f6d711f46c3ed51f15d201b97860854a0e286083903dc94aeeec42acec85f8_arm64, openshift4/ose-csi-external-resizer-rhel8@sha256:89f6d711f46c3ed51f15d201b97860854a0e286083903dc94aeeec42acec85f8_arm64 |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:c9eda640b55f7a58e66778049401c5933227b24c0967e9be004b658f1b2231bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sdn-rhel8@sha256:c9eda640b55f7a58e66778049401c5933227b24c0967e9be004b658f1b2231bf_ppc64le, openshift4/ose-sdn-rhel8@sha256:c9eda640b55f7a58e66778049401c5933227b24c0967e9be004b658f1b2231bf_ppc64le, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:222b8644e5bfb5b1a10374f138f01fadb4fc5161e67c44414c229d5a00e5189a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:222b8644e5bfb5b1a10374f138f01fadb4fc5161e67c44414c229d5a00e5189a_ppc64le, *, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:222b8644e5bfb5b1a10374f138f01fadb4fc5161e67c44414c229d5a00e5189a_ppc64le |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:dc8637be7b07129702e5414e13f3be51e2e81c332b4f17cb745cfb05a84841c1_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sdn-rhel8@sha256:dc8637be7b07129702e5414e13f3be51e2e81c332b4f17cb745cfb05a84841c1_arm64, openshift4/ose-sdn-rhel8@sha256:dc8637be7b07129702e5414e13f3be51e2e81c332b4f17cb745cfb05a84841c1_arm64, openshift4/ose-sdn-rhel8@sha256:dc8637be7b07129702e5414e13f3be51e2e81c332b4f17cb745cfb05a84841c1_arm64 |
…and 1288 more
Timeline
- Feb 7, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0660 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://issues.redhat.com/browse/OCPBUGS-23106 advisory
- https://issues.redhat.com/browse/OCPBUGS-23499 advisory
- https://issues.redhat.com/browse/OCPBUGS-27257 advisory
- https://issues.redhat.com/browse/OCPBUGS-27736 advisory
- https://issues.redhat.com/browse/OCPBUGS-27816 advisory
- https://issues.redhat.com/browse/OCPBUGS-27891 advisory
- https://issues.redhat.com/browse/OCPBUGS-27958 advisory
- https://issues.redhat.com/browse/OCPBUGS-28228 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0660.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
…and 5 more