VDB
RHSA-2024%3A1454
RHSA-2024%3A1454
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:83106e65569588efe04fdf16e30b7d3f3324bd1214208192bbb5d93e2b37f145_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:83106e65569588efe04fdf16e30b7d3f3324bd1214208192bbb5d93e2b37f145_arm64 |
| Red Hat | openshift4/ose-hyperkube@sha256:7b59c83e3a4f683a8a3649eda727e9375fa623992a04ef8a04dbbe1dd18d2200_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hyperkube@sha256:7b59c83e3a4f683a8a3649eda727e9375fa623992a04ef8a04dbbe1dd18d2200_ppc64le, *, openshift4/ose-hyperkube@sha256:7b59c83e3a4f683a8a3649eda727e9375fa623992a04ef8a04dbbe1dd18d2200_ppc64le |
| Red Hat | openshift4/ose-hyperkube@sha256:c2310a84d964888e4b77cc66fb1a32afd251bb702641cd4e5a3702ecb98b744e_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hyperkube@sha256:c2310a84d964888e4b77cc66fb1a32afd251bb702641cd4e5a3702ecb98b744e_s390x, openshift4/ose-hyperkube@sha256:c2310a84d964888e4b77cc66fb1a32afd251bb702641cd4e5a3702ecb98b744e_s390x, openshift4/ose-hyperkube@sha256:c2310a84d964888e4b77cc66fb1a32afd251bb702641cd4e5a3702ecb98b744e_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:c0fa5065b8fabcad04781da559dfa87066f8c2f9d5494acad8efe9e7cceaed06_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:c0fa5065b8fabcad04781da559dfa87066f8c2f9d5494acad8efe9e7cceaed06_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:c0fa5065b8fabcad04781da559dfa87066f8c2f9d5494acad8efe9e7cceaed06_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:c0fa5065b8fabcad04781da559dfa87066f8c2f9d5494acad8efe9e7cceaed06_s390x |
| Red Hat | openshift4/ose-machine-api-provider-azure-rhel8@sha256:d61110db27ea3f2b614a5ab413ff18e283c15ef2c44a2a6da3533bbcacf82cde_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-api-provider-azure-rhel8@sha256:d61110db27ea3f2b614a5ab413ff18e283c15ef2c44a2a6da3533bbcacf82cde_amd64, *, * |
| Red Hat | openshift4/ose-machine-config-operator@sha256:47943ae20065847f225afbe1d8841045b98c99cfa23e66ebe6e659cca59a4252_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-machine-config-operator@sha256:47943ae20065847f225afbe1d8841045b98c99cfa23e66ebe6e659cca59a4252_amd64, openshift4/ose-machine-config-operator@sha256:47943ae20065847f225afbe1d8841045b98c99cfa23e66ebe6e659cca59a4252_amd64 |
| Red Hat | rhcos@sha256:cab1c14293f10f3a98b5ed44cb3084f7652dc6437e8041594fb5e14117557672_aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | *, rhcos@sha256:cab1c14293f10f3a98b5ed44cb3084f7652dc6437e8041594fb5e14117557672_aarch64, * |
| Red Hat | openshift4/ose-hyperkube@sha256:7604b4b3b6399dd3fa23703ce289f829e2bda55858614cbaf241c0cf92f70558_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hyperkube@sha256:7604b4b3b6399dd3fa23703ce289f829e2bda55858614cbaf241c0cf92f70558_arm64, openshift4/ose-hyperkube@sha256:7604b4b3b6399dd3fa23703ce289f829e2bda55858614cbaf241c0cf92f70558_arm64, openshift4/ose-hyperkube@sha256:7604b4b3b6399dd3fa23703ce289f829e2bda55858614cbaf241c0cf92f70558_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:81fd850ffe3b3a7e79dc6418e587ff65e5aa2a7f7f4016551ce8f8f0d8c07bb6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:81fd850ffe3b3a7e79dc6418e587ff65e5aa2a7f7f4016551ce8f8f0d8c07bb6_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:81fd850ffe3b3a7e79dc6418e587ff65e5aa2a7f7f4016551ce8f8f0d8c07bb6_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:81fd850ffe3b3a7e79dc6418e587ff65e5aa2a7f7f4016551ce8f8f0d8c07bb6_amd64 |
| Red Hat | openshift4/ose-console-operator@sha256:423fa26273fb7a9700c27cb56c846f83eefb48cadebd6bd655fe894aa027e691_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-console-operator@sha256:423fa26273fb7a9700c27cb56c846f83eefb48cadebd6bd655fe894aa027e691_ppc64le, openshift4/ose-console-operator@sha256:423fa26273fb7a9700c27cb56c846f83eefb48cadebd6bd655fe894aa027e691_ppc64le |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:d2997a6af5d1ea9b8a229bd36f3ce7654c3ac3fda4a4b9581e668b01a8bfd3b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:d2997a6af5d1ea9b8a229bd36f3ce7654c3ac3fda4a4b9581e668b01a8bfd3b7_ppc64le, openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:d2997a6af5d1ea9b8a229bd36f3ce7654c3ac3fda4a4b9581e668b01a8bfd3b7_ppc64le, * |
| Red Hat | openshift4/ose-console@sha256:4a2abb771a989d933ae7a695f9c60de3a935aad587f98838e8b642c031de1258_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-console@sha256:4a2abb771a989d933ae7a695f9c60de3a935aad587f98838e8b642c031de1258_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:f79079ba0138fa8cc26bbe6c20b42089eed69fcb09d67b176045cd090d62dd65_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:f79079ba0138fa8cc26bbe6c20b42089eed69fcb09d67b176045cd090d62dd65_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:f79079ba0138fa8cc26bbe6c20b42089eed69fcb09d67b176045cd090d62dd65_ppc64le |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:41c34eca0986697d740cb837e0f4bc07d8cf3ae4ac885c0c5ea3b8e3e451daae_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:41c34eca0986697d740cb837e0f4bc07d8cf3ae4ac885c0c5ea3b8e3e451daae_amd64, openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:41c34eca0986697d740cb837e0f4bc07d8cf3ae4ac885c0c5ea3b8e3e451daae_amd64, openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:41c34eca0986697d740cb837e0f4bc07d8cf3ae4ac885c0c5ea3b8e3e451daae_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:8a427008c8d1f3b73d5cdeccba585e56371eaeac9b62fe33b5ec21ef95e66b17_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:8a427008c8d1f3b73d5cdeccba585e56371eaeac9b62fe33b5ec21ef95e66b17_amd64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:8a427008c8d1f3b73d5cdeccba585e56371eaeac9b62fe33b5ec21ef95e66b17_amd64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:2ed6645049a03fbc176437def47a68e5b0f3c4dcb1651eb77d0dda138ad9542b_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-tools-rhel8@sha256:2ed6645049a03fbc176437def47a68e5b0f3c4dcb1651eb77d0dda138ad9542b_ppc64le, openshift4/ose-tools-rhel8@sha256:2ed6645049a03fbc176437def47a68e5b0f3c4dcb1651eb77d0dda138ad9542b_ppc64le, openshift4/ose-tools-rhel8@sha256:2ed6645049a03fbc176437def47a68e5b0f3c4dcb1651eb77d0dda138ad9542b_ppc64le |
| Red Hat | openshift4/network-tools-rhel8@sha256:105a91a836aa95de1b33e9b24b1c3b66e2905d052ea0735ad84fb90b0635a7d9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:105a91a836aa95de1b33e9b24b1c3b66e2905d052ea0735ad84fb90b0635a7d9_amd64, openshift4/network-tools-rhel8@sha256:105a91a836aa95de1b33e9b24b1c3b66e2905d052ea0735ad84fb90b0635a7d9_amd64, openshift4/network-tools-rhel8@sha256:105a91a836aa95de1b33e9b24b1c3b66e2905d052ea0735ad84fb90b0635a7d9_amd64 |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:a46301db5fbd886c81bf500e0bb32485852dc2e2c2b615f648a98d4131c50ff2_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:a46301db5fbd886c81bf500e0bb32485852dc2e2c2b615f648a98d4131c50ff2_arm64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:a46301db5fbd886c81bf500e0bb32485852dc2e2c2b615f648a98d4131c50ff2_arm64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:a46301db5fbd886c81bf500e0bb32485852dc2e2c2b615f648a98d4131c50ff2_arm64 |
| Red Hat | openshift4/ose-console@sha256:c819c7fcf773a96d5e32acf1baa200ee81aaf9711279cb69bbf9601267fb2691_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console@sha256:c819c7fcf773a96d5e32acf1baa200ee81aaf9711279cb69bbf9601267fb2691_arm64, openshift4/ose-console@sha256:c819c7fcf773a96d5e32acf1baa200ee81aaf9711279cb69bbf9601267fb2691_arm64, openshift4/ose-console@sha256:c819c7fcf773a96d5e32acf1baa200ee81aaf9711279cb69bbf9601267fb2691_arm64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:1c474fa798ae51762c49e9e30189699a9f6126f985188fc9330062ff832e0c62_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-machine-config-operator@sha256:1c474fa798ae51762c49e9e30189699a9f6126f985188fc9330062ff832e0c62_ppc64le, openshift4/ose-machine-config-operator@sha256:1c474fa798ae51762c49e9e30189699a9f6126f985188fc9330062ff832e0c62_ppc64le |
…and 178 more
Timeline
- Mar 27, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1454 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-26224 advisory
- https://issues.redhat.com/browse/OCPBUGS-29663 advisory
- https://issues.redhat.com/browse/OCPBUGS-29721 advisory
- https://issues.redhat.com/browse/OCPBUGS-29851 advisory
- https://issues.redhat.com/browse/OCPBUGS-29906 advisory
- https://issues.redhat.com/browse/OCPBUGS-30082 advisory
- https://issues.redhat.com/browse/OCPBUGS-30113 advisory
- https://issues.redhat.com/browse/OCPBUGS-30156 advisory
- https://issues.redhat.com/browse/OCPBUGS-30245 advisory
- https://issues.redhat.com/browse/OCPBUGS-30248 advisory
- https://issues.redhat.com/browse/OCPBUGS-30629 advisory
- https://issues.redhat.com/browse/OCPBUGS-30874 advisory
- https://issues.redhat.com/browse/OCPBUGS-30896 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1454.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
…and 5 more