VDB
RHSA-2024%3A1449
RHSA-2024%3A1449
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:44d37b2f40cf7662f6981586eb2310c3879845c9ac8f8d26dae2e9112ee83d4f_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:44d37b2f40cf7662f6981586eb2310c3879845c9ac8f8d26dae2e9112ee83d4f_s390x, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:44d37b2f40cf7662f6981586eb2310c3879845c9ac8f8d26dae2e9112ee83d4f_s390x |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:5af5d45396edad766fe64f5c08757240bd858a37e3aa040b5bcc921244c94967_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-altinfra-rhel8@sha256:5af5d45396edad766fe64f5c08757240bd858a37e3aa040b5bcc921244c94967_arm64, openshift4/ose-installer-altinfra-rhel8@sha256:5af5d45396edad766fe64f5c08757240bd858a37e3aa040b5bcc921244c94967_arm64, openshift4/ose-installer-altinfra-rhel8@sha256:5af5d45396edad766fe64f5c08757240bd858a37e3aa040b5bcc921244c94967_arm64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:3ad702eb822b1cde84bc1cff05678050d70376698f8e462caa749fe037e0ae78_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-artifacts@sha256:3ad702eb822b1cde84bc1cff05678050d70376698f8e462caa749fe037e0ae78_amd64, openshift4/ose-installer-artifacts@sha256:3ad702eb822b1cde84bc1cff05678050d70376698f8e462caa749fe037e0ae78_amd64, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:c5052e0e7fc81a160a911d3f2b73035790dda207873a6103f3b753406edd6824_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-agent-installer-api-server-rhel8@sha256:c5052e0e7fc81a160a911d3f2b73035790dda207873a6103f3b753406edd6824_amd64, openshift4/ose-agent-installer-api-server-rhel8@sha256:c5052e0e7fc81a160a911d3f2b73035790dda207873a6103f3b753406edd6824_amd64 |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:0c4bd4d0c7ffbd47698be6945cfb5f050a6f85538935bfaf43a9f24afff7856e_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-api-server-rhel8@sha256:0c4bd4d0c7ffbd47698be6945cfb5f050a6f85538935bfaf43a9f24afff7856e_ppc64le, *, openshift4/ose-agent-installer-api-server-rhel8@sha256:0c4bd4d0c7ffbd47698be6945cfb5f050a6f85538935bfaf43a9f24afff7856e_ppc64le |
| Red Hat | openshift4/ose-multus-cni@sha256:d5ac9d15c683a1533c8d4aaab0c7fcd749b15edbc194ea8498e3ae6a0caf1c6a_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-multus-cni@sha256:d5ac9d15c683a1533c8d4aaab0c7fcd749b15edbc194ea8498e3ae6a0caf1c6a_amd64, * |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:2bd5b85e81d6d8f0750437f0f8a18ead1a38f5c02d121e8c93402aceace951c4_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-hyperkube-rhel9@sha256:2bd5b85e81d6d8f0750437f0f8a18ead1a38f5c02d121e8c93402aceace951c4_amd64, *, openshift4/ose-hyperkube-rhel9@sha256:2bd5b85e81d6d8f0750437f0f8a18ead1a38f5c02d121e8c93402aceace951c4_amd64 |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:bddac07e9909e1f6e05439fe4f8ec6a58219a34c5bc5a31338da96d47e7009a2_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-os-images-rhel8@sha256:bddac07e9909e1f6e05439fe4f8ec6a58219a34c5bc5a31338da96d47e7009a2_s390x, openshift4/ose-machine-os-images-rhel8@sha256:bddac07e9909e1f6e05439fe4f8ec6a58219a34c5bc5a31338da96d47e7009a2_s390x, * |
| Red Hat | openshift4/ose-tests@sha256:7c2d017386dec39c54c795afcf2ada84da58865d95e388723a3395a9163b242a_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-tests@sha256:7c2d017386dec39c54c795afcf2ada84da58865d95e388723a3395a9163b242a_amd64, openshift4/ose-tests@sha256:7c2d017386dec39c54c795afcf2ada84da58865d95e388723a3395a9163b242a_amd64 |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:a3aae751fbf38cbc4ea468bb71e73eef45b0de6d4907b0c32ca320eedbacbfc4_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-altinfra-rhel8@sha256:a3aae751fbf38cbc4ea468bb71e73eef45b0de6d4907b0c32ca320eedbacbfc4_s390x, openshift4/ose-installer-altinfra-rhel8@sha256:a3aae751fbf38cbc4ea468bb71e73eef45b0de6d4907b0c32ca320eedbacbfc4_s390x, openshift4/ose-installer-altinfra-rhel8@sha256:a3aae751fbf38cbc4ea468bb71e73eef45b0de6d4907b0c32ca320eedbacbfc4_s390x |
| Red Hat | openshift4/ose-console@sha256:21f299914651b366b1d2adf7115da0bd13bcfcf4f81b6e5d090c24ae6931bdd5_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-console@sha256:21f299914651b366b1d2adf7115da0bd13bcfcf4f81b6e5d090c24ae6931bdd5_amd64, *, * |
| Red Hat | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:50715c2f0131aab0ffdd3f31ad7357fd1239ce25f5061fc48c99b463a9369091_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/oc-mirror-plugin-rhel9@sha256:b98e809102d070597a03973d6acef0b578466ca0005adc39141bfc664e0b2004_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/oc-mirror-plugin-rhel9@sha256:b98e809102d070597a03973d6acef0b578466ca0005adc39141bfc664e0b2004_arm64, openshift4/oc-mirror-plugin-rhel9@sha256:b98e809102d070597a03973d6acef0b578466ca0005adc39141bfc664e0b2004_arm64, openshift4/oc-mirror-plugin-rhel9@sha256:b98e809102d070597a03973d6acef0b578466ca0005adc39141bfc664e0b2004_arm64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:cd0e11d2f239dcd6fed038e52ad60d173b1b965aab01ae43cded91e17a5f56af_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:3a8ce33f5c07d3d5d85c4adc7c44676c4f95f28b978d789109ba91bf0647923c_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:3a8ce33f5c07d3d5d85c4adc7c44676c4f95f28b978d789109ba91bf0647923c_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:3a8ce33f5c07d3d5d85c4adc7c44676c4f95f28b978d789109ba91bf0647923c_ppc64le |
| Red Hat | openshift4/ose-cluster-network-rhel9-operator@sha256:4dac13c65035681a1e77687c817f960260cd42c91b9f78643c5f60f05c40899f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-cluster-network-rhel9-operator@sha256:4dac13c65035681a1e77687c817f960260cd42c91b9f78643c5f60f05c40899f_arm64 |
| Red Hat | openshift4/ose-pod-rhel9@sha256:de358f2e9bc6d5b6dd9db6620502231ace9cc2e9a1a40bf25e2a0207b0f67b09_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-pod-rhel9@sha256:de358f2e9bc6d5b6dd9db6620502231ace9cc2e9a1a40bf25e2a0207b0f67b09_s390x, openshift4/ose-pod-rhel9@sha256:de358f2e9bc6d5b6dd9db6620502231ace9cc2e9a1a40bf25e2a0207b0f67b09_s390x |
| Red Hat | openshift4/ose-docker-builder@sha256:6d3a7e2ad6999e1e8e5b0960b897eece9789b348023ca3c9b932e3ba168cb94d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-docker-builder@sha256:6d3a7e2ad6999e1e8e5b0960b897eece9789b348023ca3c9b932e3ba168cb94d_ppc64le, openshift4/ose-docker-builder@sha256:6d3a7e2ad6999e1e8e5b0960b897eece9789b348023ca3c9b932e3ba168cb94d_ppc64le, * |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:0d3db65109b72147d830e9d7092de2ea08a67357a42c6fecb005447ea1805e60_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:0d3db65109b72147d830e9d7092de2ea08a67357a42c6fecb005447ea1805e60_amd64, * |
| Red Hat | openshift4/ose-cluster-api-rhel9@sha256:d9ece0b6aabc912ee4c467d260e8813f30b30f5e9b5464529f23a4bc150992a0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-api-rhel9@sha256:d9ece0b6aabc912ee4c467d260e8813f30b30f5e9b5464529f23a4bc150992a0_ppc64le, *, openshift4/ose-cluster-api-rhel9@sha256:d9ece0b6aabc912ee4c467d260e8813f30b30f5e9b5464529f23a4bc150992a0_ppc64le |
…and 188 more
Timeline
- Mar 27, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1449 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-18986 advisory
- https://issues.redhat.com/browse/OCPBUGS-24118 advisory
- https://issues.redhat.com/browse/OCPBUGS-29236 advisory
- https://issues.redhat.com/browse/OCPBUGS-29458 advisory
- https://issues.redhat.com/browse/OCPBUGS-29930 advisory
- https://issues.redhat.com/browse/OCPBUGS-29955 advisory
- https://issues.redhat.com/browse/OCPBUGS-29963 advisory
- https://issues.redhat.com/browse/OCPBUGS-29964 advisory
- https://issues.redhat.com/browse/OCPBUGS-30093 advisory
- https://issues.redhat.com/browse/OCPBUGS-30180 advisory
- https://issues.redhat.com/browse/OCPBUGS-30237 advisory
- https://issues.redhat.com/browse/OCPBUGS-30572 advisory
- https://issues.redhat.com/browse/OCPBUGS-30577 advisory
…and 20 more