VDB
RHSA-2024%3A1037
RHSA-2024%3A1037
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:4cc7390b0c15abb9ebe7956c0469927a3c9c07227f14eb0701b976a40a8ad0d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-image-registry-operator@sha256:4cc7390b0c15abb9ebe7956c0469927a3c9c07227f14eb0701b976a40a8ad0d3_ppc64le, *, openshift4/ose-cluster-image-registry-operator@sha256:4cc7390b0c15abb9ebe7956c0469927a3c9c07227f14eb0701b976a40a8ad0d3_ppc64le |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:e93c2512369179b7c5aa877a4cf33712b7c4ff58a6ac0563dbb7b7a617962dcb_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:ea4f428f32e0b3d563684489337b5d9d85d9bded8ba953379c59bf92f4d575cd_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-config-operator@sha256:ea4f428f32e0b3d563684489337b5d9d85d9bded8ba953379c59bf92f4d575cd_arm64, openshift4/ose-cluster-config-operator@sha256:ea4f428f32e0b3d563684489337b5d9d85d9bded8ba953379c59bf92f4d575cd_arm64, * |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:ac2e6f3ae6fda3e9c45bfdb3d030a7371bf9e13f681779410c0791a2c98e0662_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-network-operator@sha256:ac2e6f3ae6fda3e9c45bfdb3d030a7371bf9e13f681779410c0791a2c98e0662_arm64, * |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:2a58c1a609e4a77da66c8b5e8833d9d9df16320d44c75f9b7662ba66a4f725e6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:2a58c1a609e4a77da66c8b5e8833d9d9df16320d44c75f9b7662ba66a4f725e6_amd64, openshift4/driver-toolkit-rhel9@sha256:2a58c1a609e4a77da66c8b5e8833d9d9df16320d44c75f9b7662ba66a4f725e6_amd64, * |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:eed3827b3d2c0991701a7dc1b11fd9c470300fc280e0774029d37a106ec3daa8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-config-operator@sha256:eed3827b3d2c0991701a7dc1b11fd9c470300fc280e0774029d37a106ec3daa8_s390x, openshift4/ose-cluster-config-operator@sha256:eed3827b3d2c0991701a7dc1b11fd9c470300fc280e0774029d37a106ec3daa8_s390x, openshift4/ose-cluster-config-operator@sha256:eed3827b3d2c0991701a7dc1b11fd9c470300fc280e0774029d37a106ec3daa8_s390x |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:4fa48b5e67503877b9b33e242385cd764eb9983eecb99870eb89dfad9d5dbd0b_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:4fa48b5e67503877b9b33e242385cd764eb9983eecb99870eb89dfad9d5dbd0b_ppc64le, openshift4/driver-toolkit-rhel9@sha256:4fa48b5e67503877b9b33e242385cd764eb9983eecb99870eb89dfad9d5dbd0b_ppc64le, openshift4/driver-toolkit-rhel9@sha256:4fa48b5e67503877b9b33e242385cd764eb9983eecb99870eb89dfad9d5dbd0b_ppc64le |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:808f987e40d50501fc4f8f16f2a42062c0f7419f87db78d58dfedac7759d5e79_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:808f987e40d50501fc4f8f16f2a42062c0f7419f87db78d58dfedac7759d5e79_amd64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:808f987e40d50501fc4f8f16f2a42062c0f7419f87db78d58dfedac7759d5e79_amd64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:808f987e40d50501fc4f8f16f2a42062c0f7419f87db78d58dfedac7759d5e79_amd64 |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:4704e5fcc739c86c2556770892d2bf522126d56755be5d92af805b4fd88c7606_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-image-registry-operator@sha256:4704e5fcc739c86c2556770892d2bf522126d56755be5d92af805b4fd88c7606_amd64, *, * |
| Red Hat | openshift4/ose-console@sha256:e3206d445ea17d898dbae1afeeb15bd6d09d3ea97ed067513c33684645cf3b67_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:ac2e6f3ae6fda3e9c45bfdb3d030a7371bf9e13f681779410c0791a2c98e0662_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-network-operator@sha256:ac2e6f3ae6fda3e9c45bfdb3d030a7371bf9e13f681779410c0791a2c98e0662_arm64, * |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:08260a142e3b4e4a3248cb14c49b47729588a525cfbd72034a64a01518860013_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-csi-snapshot-controller-rhel8@sha256:08260a142e3b4e4a3248cb14c49b47729588a525cfbd72034a64a01518860013_arm64, openshift4/ose-csi-snapshot-controller-rhel8@sha256:08260a142e3b4e4a3248cb14c49b47729588a525cfbd72034a64a01518860013_arm64 |
| Red Hat | openshift4/ose-console@sha256:3daf59dd42a704d82023dd94648f1352e4089570865d0a7e6ecd71d0f34a778c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console@sha256:3daf59dd42a704d82023dd94648f1352e4089570865d0a7e6ecd71d0f34a778c_ppc64le, openshift4/ose-console@sha256:3daf59dd42a704d82023dd94648f1352e4089570865d0a7e6ecd71d0f34a778c_ppc64le, openshift4/ose-console@sha256:3daf59dd42a704d82023dd94648f1352e4089570865d0a7e6ecd71d0f34a778c_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:28d05d14c5fcdcedd0d354e061dc5dfcc55ffa905a7bce98c494c247477d9d1d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:28d05d14c5fcdcedd0d354e061dc5dfcc55ffa905a7bce98c494c247477d9d1d_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:28d05d14c5fcdcedd0d354e061dc5dfcc55ffa905a7bce98c494c247477d9d1d_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:28d05d14c5fcdcedd0d354e061dc5dfcc55ffa905a7bce98c494c247477d9d1d_amd64 |
| Red Hat | openshift4/network-tools-rhel8@sha256:e00ce76b371b816a8c80cfd4ed7bbc9f38dfff1238bbab5208356e7c52e71217_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:e00ce76b371b816a8c80cfd4ed7bbc9f38dfff1238bbab5208356e7c52e71217_s390x, openshift4/network-tools-rhel8@sha256:e00ce76b371b816a8c80cfd4ed7bbc9f38dfff1238bbab5208356e7c52e71217_s390x, openshift4/network-tools-rhel8@sha256:e00ce76b371b816a8c80cfd4ed7bbc9f38dfff1238bbab5208356e7c52e71217_s390x |
| Red Hat | rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x, rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x, rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:05ed7192b209e4ea16d6b8c4b637098249ebcc449b3afbb5bb0f6c64613f0bd7_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-external-snapshotter-rhel8@sha256:05ed7192b209e4ea16d6b8c4b637098249ebcc449b3afbb5bb0f6c64613f0bd7_s390x, openshift4/ose-csi-external-snapshotter-rhel8@sha256:05ed7192b209e4ea16d6b8c4b637098249ebcc449b3afbb5bb0f6c64613f0bd7_s390x, openshift4/ose-csi-external-snapshotter-rhel8@sha256:05ed7192b209e4ea16d6b8c4b637098249ebcc449b3afbb5bb0f6c64613f0bd7_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:591ce173f8e85a127dcbf5f7496206f3aa805f1fbf3fed84e6b1fae72298f812_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:591ce173f8e85a127dcbf5f7496206f3aa805f1fbf3fed84e6b1fae72298f812_s390x, *, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:591ce173f8e85a127dcbf5f7496206f3aa805f1fbf3fed84e6b1fae72298f812_s390x |
| Red Hat | rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x, rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x, rhcos@sha256:6d3caafcef591fc4ef86a4a3c5c786898ed744eb29e0f953b57366440f5e4c10_s390x |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:851dc6943b566fdabd35c1685e4cda695b9a758243474e27410d62892ba54297_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-csi-snapshot-controller-rhel8@sha256:851dc6943b566fdabd35c1685e4cda695b9a758243474e27410d62892ba54297_s390x, * |
…and 132 more
Timeline
- Mar 6, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1037 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-23501 advisory
- https://issues.redhat.com/browse/OCPBUGS-24353 advisory
- https://issues.redhat.com/browse/OCPBUGS-27406 advisory
- https://issues.redhat.com/browse/OCPBUGS-28630 advisory
- https://issues.redhat.com/browse/OCPBUGS-29670 advisory
- https://issues.redhat.com/browse/OCPBUGS-29674 advisory
- https://issues.redhat.com/browse/OCPBUGS-29725 advisory
- https://issues.redhat.com/browse/OCPBUGS-29728 advisory
- https://issues.redhat.com/browse/OCPBUGS-29766 advisory
- https://issues.redhat.com/browse/OCPBUGS-6208 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1037.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
…and 2 more