VDB
RHSA-2024%3A0837
RHSA-2024%3A0837
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64, * |
| Red Hat | openshift4/ose-csi-livenessprobe-rhel8@sha256:af8f066d56f1009c22723256b4e59760b0f2adfbd1a681f98705f10a29c56245_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-csi-livenessprobe-rhel8@sha256:af8f066d56f1009c22723256b4e59760b0f2adfbd1a681f98705f10a29c56245_s390x, openshift4/ose-csi-livenessprobe-rhel8@sha256:af8f066d56f1009c22723256b4e59760b0f2adfbd1a681f98705f10a29c56245_s390x |
| Red Hat | openshift4/ose-olm-catalogd-rhel8@sha256:c4c04453781e40a2e50b76791758d301aea257abcd1da33e5d6d43f440772ab6_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-olm-catalogd-rhel8@sha256:c4c04453781e40a2e50b76791758d301aea257abcd1da33e5d6d43f440772ab6_s390x, openshift4/ose-olm-catalogd-rhel8@sha256:c4c04453781e40a2e50b76791758d301aea257abcd1da33e5d6d43f440772ab6_s390x, * |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:774436edbf2aaf8797146410a895cb7d1269baf588385572059c74f89a49aba0_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:774436edbf2aaf8797146410a895cb7d1269baf588385572059c74f89a49aba0_amd64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:774436edbf2aaf8797146410a895cb7d1269baf588385572059c74f89a49aba0_amd64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:774436edbf2aaf8797146410a895cb7d1269baf588385572059c74f89a49aba0_amd64 |
| Red Hat | openshift4/ose-kuryr-cni-rhel8@sha256:5ffabf604f93a760332f7203bf10d668288fc0812b2f8f05ad03c34ba47334c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-kuryr-cni-rhel8@sha256:5ffabf604f93a760332f7203bf10d668288fc0812b2f8f05ad03c34ba47334c4_ppc64le, openshift4/ose-kuryr-cni-rhel8@sha256:5ffabf604f93a760332f7203bf10d668288fc0812b2f8f05ad03c34ba47334c4_ppc64le, openshift4/ose-kuryr-cni-rhel8@sha256:5ffabf604f93a760332f7203bf10d668288fc0812b2f8f05ad03c34ba47334c4_ppc64le |
| Red Hat | openshift4/ose-deployer@sha256:b43aba1db1e94d4b9d0f006f68963d8d52204319c74b53f11be98a1d0c61bada_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-deployer@sha256:b43aba1db1e94d4b9d0f006f68963d8d52204319c74b53f11be98a1d0c61bada_amd64, openshift4/ose-deployer@sha256:b43aba1db1e94d4b9d0f006f68963d8d52204319c74b53f11be98a1d0c61bada_amd64, * |
| Red Hat | openshift4/ose-azure-cloud-node-manager-rhel8@sha256:a485d30424308564b01a51f9b240a123e6be4f14f2d2e35cf9727844c5ca5afa_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-cloud-node-manager-rhel8@sha256:a485d30424308564b01a51f9b240a123e6be4f14f2d2e35cf9727844c5ca5afa_amd64, openshift4/ose-azure-cloud-node-manager-rhel8@sha256:a485d30424308564b01a51f9b240a123e6be4f14f2d2e35cf9727844c5ca5afa_amd64, openshift4/ose-azure-cloud-node-manager-rhel8@sha256:a485d30424308564b01a51f9b240a123e6be4f14f2d2e35cf9727844c5ca5afa_amd64 |
| Red Hat | openshift4/ose-baremetal-machine-controllers@sha256:fe34e7b9c02dbe6374bd2e37a82c4372f9abe35c19c4fcdb9cabe4b46f9dedbf_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-baremetal-machine-controllers@sha256:fe34e7b9c02dbe6374bd2e37a82c4372f9abe35c19c4fcdb9cabe4b46f9dedbf_arm64, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:858d3b25331bee343565550270acd2860157696fe98d5fc32cc7249d9320b6c9_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-rhel9@sha256:858d3b25331bee343565550270acd2860157696fe98d5fc32cc7249d9320b6c9_amd64, *, * |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:4865f5df02771cd45ffa66387998af960db268bdc6a50c367c1e67eecabd38e3_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-insights-rhel8-operator@sha256:4865f5df02771cd45ffa66387998af960db268bdc6a50c367c1e67eecabd38e3_amd64 |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82_amd64 |
| Red Hat | openshift4/ose-olm-operator-controller-rhel8@sha256:2156847b2ef928d1b6d67cc7920a684813f502ed7c22177bc8b753588ff3f4a4_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-olm-operator-controller-rhel8@sha256:2156847b2ef928d1b6d67cc7920a684813f502ed7c22177bc8b753588ff3f4a4_arm64, openshift4/ose-olm-operator-controller-rhel8@sha256:2156847b2ef928d1b6d67cc7920a684813f502ed7c22177bc8b753588ff3f4a4_arm64, openshift4/ose-olm-operator-controller-rhel8@sha256:2156847b2ef928d1b6d67cc7920a684813f502ed7c22177bc8b753588ff3f4a4_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:2d0158da4d43a2d096cab9f4531d0501271cb77f37fa6bf3957e8769128945ef_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:2d0158da4d43a2d096cab9f4531d0501271cb77f37fa6bf3957e8769128945ef_amd64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:2d0158da4d43a2d096cab9f4531d0501271cb77f37fa6bf3957e8769128945ef_amd64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:2d0158da4d43a2d096cab9f4531d0501271cb77f37fa6bf3957e8769128945ef_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:824f02ec8e3989a9971bf0a956a48e0b406a4ba0066f09a9bad16f11a67792f5_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:824f02ec8e3989a9971bf0a956a48e0b406a4ba0066f09a9bad16f11a67792f5_arm64, *, openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:824f02ec8e3989a9971bf0a956a48e0b406a4ba0066f09a9bad16f11a67792f5_arm64 |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:0f1482ca653767951dbb0c26bb810a157866cb807f19fa55ec6126fe0ade462f_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-csi-external-resizer@sha256:0f1482ca653767951dbb0c26bb810a157866cb807f19fa55ec6126fe0ade462f_arm64, openshift4/ose-csi-external-resizer@sha256:0f1482ca653767951dbb0c26bb810a157866cb807f19fa55ec6126fe0ade462f_arm64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:0af14e7a9b85a14dfcd18a8398d23c6d2fe1d7e9c653df90ac2e08c725154658_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:0af14e7a9b85a14dfcd18a8398d23c6d2fe1d7e9c653df90ac2e08c725154658_ppc64le |
| Red Hat | openshift4/ose-csi-snapshot-controller@sha256:0c14cd1098a0802f3aaddccddb189b146b1a2835d2f2edbc428e26cd3b42dfbe_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-snapshot-controller@sha256:0c14cd1098a0802f3aaddccddb189b146b1a2835d2f2edbc428e26cd3b42dfbe_s390x, openshift4/ose-csi-snapshot-controller@sha256:0c14cd1098a0802f3aaddccddb189b146b1a2835d2f2edbc428e26cd3b42dfbe_s390x, openshift4/ose-csi-snapshot-controller@sha256:0c14cd1098a0802f3aaddccddb189b146b1a2835d2f2edbc428e26cd3b42dfbe_s390x |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:6dbb8339c5835723345d8d034625ce3cf48e9485173fa163dd19c3c2c4b71ed9_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-external-resizer@sha256:6dbb8339c5835723345d8d034625ce3cf48e9485173fa163dd19c3c2c4b71ed9_s390x, openshift4/ose-csi-external-resizer@sha256:6dbb8339c5835723345d8d034625ce3cf48e9485173fa163dd19c3c2c4b71ed9_s390x, openshift4/ose-csi-external-resizer@sha256:6dbb8339c5835723345d8d034625ce3cf48e9485173fa163dd19c3c2c4b71ed9_s390x |
| Red Hat | openshift4/ose-cluster-api-rhel8@sha256:57584166753c1fb6451863e746c0ae960374289691427b35bf4a641ef12ad23d_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-api-rhel8@sha256:57584166753c1fb6451863e746c0ae960374289691427b35bf4a641ef12ad23d_s390x, openshift4/ose-cluster-api-rhel8@sha256:57584166753c1fb6451863e746c0ae960374289691427b35bf4a641ef12ad23d_s390x, openshift4/ose-cluster-api-rhel8@sha256:57584166753c1fb6451863e746c0ae960374289691427b35bf4a641ef12ad23d_s390x |
| Red Hat | openshift4/openshift-route-controller-manager-rhel8@sha256:df0e03fc0a6d73742f004cae3f970f10e6bb7d9d70b55c4622744aeec4a53b01_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
…and 1226 more
Timeline
- Feb 20, 2024 CVE Published
- May 3, 2026 Distribution Patch
- May 3, 2026 Security Advisory
- May 11, 2026 Distribution Patch
- May 11, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://issues.redhat.com/browse/OCPBUGS-29300 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0837.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://issues.redhat.com/browse/OCPBUGS-29100 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://issues.redhat.com/browse/OCPBUGS-22270 advisory
- https://issues.redhat.com/browse/OCPBUGS-26072 advisory
- https://issues.redhat.com/browse/OCPBUGS-29431 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://issues.redhat.com/browse/OCPBUGS-29182 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
- https://access.redhat.com/errata/RHSA-2024:0837 advisory
- https://issues.redhat.com/browse/OCPBUGS-29207 advisory
- https://issues.redhat.com/browse/OCPBUGS-29187 advisory
…and 2 more