VDB
RHSA-2024%3A0941
RHSA-2024%3A0941
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:56665b03b08e6e85bc29298f0f8d2de002ee4fe12c184ef6e09b5ed50aec3c77_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:56665b03b08e6e85bc29298f0f8d2de002ee4fe12c184ef6e09b5ed50aec3c77_s390x, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:56665b03b08e6e85bc29298f0f8d2de002ee4fe12c184ef6e09b5ed50aec3c77_s390x, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:56665b03b08e6e85bc29298f0f8d2de002ee4fe12c184ef6e09b5ed50aec3c77_s390x |
| Red Hat | openshift4/ose-tests@sha256:42d557b4420ad8e6eab6ecf11791c907f6e62d02b3c1cafd9098d84b1cc1b818_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-tests@sha256:42d557b4420ad8e6eab6ecf11791c907f6e62d02b3c1cafd9098d84b1cc1b818_ppc64le |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:0d0b32431a9af979e9193070b7aacb855a2c7d5d6bbb3e667e0d50465e110dfe_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-operator-lifecycle-manager@sha256:0d0b32431a9af979e9193070b7aacb855a2c7d5d6bbb3e667e0d50465e110dfe_arm64, openshift4/ose-operator-lifecycle-manager@sha256:0d0b32431a9af979e9193070b7aacb855a2c7d5d6bbb3e667e0d50465e110dfe_arm64, * |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:adf1487bab89184a22d9335bd76f7000277caa66501712dd3fc9235b4e34d4bb_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-insights-rhel8-operator@sha256:adf1487bab89184a22d9335bd76f7000277caa66501712dd3fc9235b4e34d4bb_arm64, openshift4/ose-insights-rhel8-operator@sha256:adf1487bab89184a22d9335bd76f7000277caa66501712dd3fc9235b4e34d4bb_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:69a07333b46b420c6f1c43ae0153b41ca615c12dbe666b49363b766550118aab_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes@sha256:69a07333b46b420c6f1c43ae0153b41ca615c12dbe666b49363b766550118aab_amd64, *, openshift4/ose-ovn-kubernetes@sha256:69a07333b46b420c6f1c43ae0153b41ca615c12dbe666b49363b766550118aab_amd64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le, openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le, openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le |
| Red Hat | openshift4/ose-csi-snapshot-controller@sha256:c12c0d792bf727ce9472b18b7c2c10cddf33f65473d75b985ffddce9057f0d52_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-snapshot-controller@sha256:c12c0d792bf727ce9472b18b7c2c10cddf33f65473d75b985ffddce9057f0d52_arm64, *, openshift4/ose-csi-snapshot-controller@sha256:c12c0d792bf727ce9472b18b7c2c10cddf33f65473d75b985ffddce9057f0d52_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:b0e11d4edb6dbfbfd194c3a00786a8426a4b5242503e2add988ce0b0cd12cb55_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/driver-toolkit-rhel9@sha256:b0e11d4edb6dbfbfd194c3a00786a8426a4b5242503e2add988ce0b0cd12cb55_arm64, *, openshift4/driver-toolkit-rhel9@sha256:b0e11d4edb6dbfbfd194c3a00786a8426a4b5242503e2add988ce0b0cd12cb55_arm64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le, openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le, openshift4/ose-cloud-credential-operator@sha256:9befd2c3201737fa71487d14669c3a5e9dac2589e56017c12cad3a8360bf5b94_ppc64le |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:b03a3c6dfc71b940b1f42cbe699a5bbb57f591c561ce0363c55ab1bd0c530f9d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/driver-toolkit-rhel9@sha256:b03a3c6dfc71b940b1f42cbe699a5bbb57f591c561ce0363c55ab1bd0c530f9d_ppc64le, openshift4/driver-toolkit-rhel9@sha256:b03a3c6dfc71b940b1f42cbe699a5bbb57f591c561ce0363c55ab1bd0c530f9d_ppc64le, openshift4/driver-toolkit-rhel9@sha256:b03a3c6dfc71b940b1f42cbe699a5bbb57f591c561ce0363c55ab1bd0c530f9d_ppc64le |
| Red Hat | openshift4/ose-tools-rhel8@sha256:53be3227579f72c4bcd864d82b2543c633fa35ef9bbe310a2dddb6985fba1a9e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:aa00957cdc912ceabdaf09dd3b005c78414cc4ee7e6a8a588e3fa2151317213e_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-rhel9@sha256:aa00957cdc912ceabdaf09dd3b005c78414cc4ee7e6a8a588e3fa2151317213e_arm64, openshift4/ose-ovn-kubernetes-rhel9@sha256:aa00957cdc912ceabdaf09dd3b005c78414cc4ee7e6a8a588e3fa2151317213e_arm64, openshift4/ose-ovn-kubernetes-rhel9@sha256:aa00957cdc912ceabdaf09dd3b005c78414cc4ee7e6a8a588e3fa2151317213e_arm64 |
| Red Hat | openshift4/ose-machine-api-operator@sha256:27b1000fe782bf22aad93cc77b39a763026453282e72e4daa64c78fe08802775_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-machine-api-operator@sha256:27b1000fe782bf22aad93cc77b39a763026453282e72e4daa64c78fe08802775_arm64, openshift4/ose-machine-api-operator@sha256:27b1000fe782bf22aad93cc77b39a763026453282e72e4daa64c78fe08802775_arm64 |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a04c5254f849e1a28e99ad196f1a9cd7b64123078caf9ed13f00ea524648264_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a04c5254f849e1a28e99ad196f1a9cd7b64123078caf9ed13f00ea524648264_arm64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a04c5254f849e1a28e99ad196f1a9cd7b64123078caf9ed13f00ea524648264_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:4ded061dbf33c4b36b1d5fac163e5eb0b15c7070cd8f9f72a86cb9ed9b29101d_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tools-rhel8@sha256:4ded061dbf33c4b36b1d5fac163e5eb0b15c7070cd8f9f72a86cb9ed9b29101d_s390x, openshift4/ose-tools-rhel8@sha256:4ded061dbf33c4b36b1d5fac163e5eb0b15c7070cd8f9f72a86cb9ed9b29101d_s390x, openshift4/ose-tools-rhel8@sha256:4ded061dbf33c4b36b1d5fac163e5eb0b15c7070cd8f9f72a86cb9ed9b29101d_s390x |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:5a11f5035c1661a307abaf9fca39bc6f344d8513e1d2b18cb802989d24fddb65_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-operator-lifecycle-manager@sha256:5a11f5035c1661a307abaf9fca39bc6f344d8513e1d2b18cb802989d24fddb65_s390x, * |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:11fc03189d2977f7824a5fc8025c642ed04701870ff40f793fc446b0b408461a_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/driver-toolkit-rhel9@sha256:11fc03189d2977f7824a5fc8025c642ed04701870ff40f793fc446b0b408461a_amd64, openshift4/driver-toolkit-rhel9@sha256:11fc03189d2977f7824a5fc8025c642ed04701870ff40f793fc446b0b408461a_amd64 |
| Red Hat | openshift4/ose-operator-registry@sha256:a598919f8dc192ceedd5210ed0e3b4896169330307b5336818af4bb979981bfa_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-operator-registry@sha256:a598919f8dc192ceedd5210ed0e3b4896169330307b5336818af4bb979981bfa_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:4f84a0f00246a63a31b115bee2dd65caebe4a072d50d1af32d409693912f3972_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:4f84a0f00246a63a31b115bee2dd65caebe4a072d50d1af32d409693912f3972_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:4f84a0f00246a63a31b115bee2dd65caebe4a072d50d1af32d409693912f3972_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:4f84a0f00246a63a31b115bee2dd65caebe4a072d50d1af32d409693912f3972_s390x |
| Red Hat | openshift4/ose-tests@sha256:b8d4866d4f7e4338a0095d0a2257e1d49396901880ec3e1d75d4a03a401b7fba_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tests@sha256:b8d4866d4f7e4338a0095d0a2257e1d49396901880ec3e1d75d4a03a401b7fba_arm64, *, openshift4/ose-tests@sha256:b8d4866d4f7e4338a0095d0a2257e1d49396901880ec3e1d75d4a03a401b7fba_arm64 |
…and 198 more
Timeline
- Feb 28, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0941 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html#ocp-4-14-asynchronous-errata-updates advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-19398 advisory
- https://issues.redhat.com/browse/OCPBUGS-20039 advisory
- https://issues.redhat.com/browse/OCPBUGS-26573 advisory
- https://issues.redhat.com/browse/OCPBUGS-28231 advisory
- https://issues.redhat.com/browse/OCPBUGS-28819 advisory
- https://issues.redhat.com/browse/OCPBUGS-28865 advisory
- https://issues.redhat.com/browse/OCPBUGS-29094 advisory
- https://issues.redhat.com/browse/OCPBUGS-29168 advisory
- https://issues.redhat.com/browse/OCPBUGS-29194 advisory
- https://issues.redhat.com/browse/OCPBUGS-29231 advisory
- https://issues.redhat.com/browse/OCPBUGS-29433 advisory
- https://issues.redhat.com/browse/OCPBUGS-29454 advisory
- https://issues.redhat.com/browse/OCPBUGS-29457 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0941.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
…and 6 more