VDB
RHSA-2024%3A1458
RHSA-2024%3A1458
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:81473298781da884afd3fdf1d645f6501efba765e018a87e316a235bee9d926a_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:81473298781da884afd3fdf1d645f6501efba765e018a87e316a235bee9d926a_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:81473298781da884afd3fdf1d645f6501efba765e018a87e316a235bee9d926a_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:684465e8547ba599cf18037cd4112637af4502c4164ca61b046989c552696de7_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:684465e8547ba599cf18037cd4112637af4502c4164ca61b046989c552696de7_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:684465e8547ba599cf18037cd4112637af4502c4164ca61b046989c552696de7_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:90c09e2975d2c46679daff24504bf599021a42d93c2c30a77ecac74cec18f5be_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-agent-installer-api-server-rhel8@sha256:90c09e2975d2c46679daff24504bf599021a42d93c2c30a77ecac74cec18f5be_ppc64le, openshift4/ose-agent-installer-api-server-rhel8@sha256:90c09e2975d2c46679daff24504bf599021a42d93c2c30a77ecac74cec18f5be_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:aa42ac8d673983e3186948cf2381cefce3dd96992b686cde15eaa0a22d416f53_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-agent-installer-api-server-rhel8@sha256:aa42ac8d673983e3186948cf2381cefce3dd96992b686cde15eaa0a22d416f53_amd64, openshift4/ose-agent-installer-api-server-rhel8@sha256:aa42ac8d673983e3186948cf2381cefce3dd96992b686cde15eaa0a22d416f53_amd64, * |
| Red Hat | openshift4/ose-installer@sha256:33606bb8e9fc872bf04cdc339fdf38726d85dc22e7ae02d85d9560d30e5d0ab3_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-installer@sha256:33606bb8e9fc872bf04cdc339fdf38726d85dc22e7ae02d85d9560d30e5d0ab3_s390x, *, openshift4/ose-installer@sha256:33606bb8e9fc872bf04cdc339fdf38726d85dc22e7ae02d85d9560d30e5d0ab3_s390x |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:c6731602a76a94eb098d0454a59cf6c3f54d562778f222de3cd217f39d8d9cc9_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-authentication-operator@sha256:c6731602a76a94eb098d0454a59cf6c3f54d562778f222de3cd217f39d8d9cc9_s390x, openshift4/ose-cluster-authentication-operator@sha256:c6731602a76a94eb098d0454a59cf6c3f54d562778f222de3cd217f39d8d9cc9_s390x, openshift4/ose-cluster-authentication-operator@sha256:c6731602a76a94eb098d0454a59cf6c3f54d562778f222de3cd217f39d8d9cc9_s390x |
| Red Hat | openshift4/ose-pod@sha256:ffdb3d25a5c689ed607bae745c612c8cfde4daa56963f521cedbfbad485bcbca_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-pod@sha256:ffdb3d25a5c689ed607bae745c612c8cfde4daa56963f521cedbfbad485bcbca_amd64, openshift4/ose-pod@sha256:ffdb3d25a5c689ed607bae745c612c8cfde4daa56963f521cedbfbad485bcbca_amd64, openshift4/ose-pod@sha256:ffdb3d25a5c689ed607bae745c612c8cfde4daa56963f521cedbfbad485bcbca_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:81473298781da884afd3fdf1d645f6501efba765e018a87e316a235bee9d926a_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:e04c69bee7f0519674548e989168de8a0a775ff8a631df17bfda40762f8ce158_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-hyperkube-rhel9@sha256:e04c69bee7f0519674548e989168de8a0a775ff8a631df17bfda40762f8ce158_ppc64le, openshift4/ose-hyperkube-rhel9@sha256:e04c69bee7f0519674548e989168de8a0a775ff8a631df17bfda40762f8ce158_ppc64le, openshift4/ose-hyperkube-rhel9@sha256:e04c69bee7f0519674548e989168de8a0a775ff8a631df17bfda40762f8ce158_ppc64le |
| Red Hat | openshift4/ose-docker-builder@sha256:fc05831680f321784d9ae538f11adfe6ab5cc05eeb2f905c2d52be8e71a084ef_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-docker-builder@sha256:fc05831680f321784d9ae538f11adfe6ab5cc05eeb2f905c2d52be8e71a084ef_s390x, *, openshift4/ose-docker-builder@sha256:fc05831680f321784d9ae538f11adfe6ab5cc05eeb2f905c2d52be8e71a084ef_s390x |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:c13801aed0d078acc0473533ae59e58c819490a533e9d524dacafb589fee863a_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-hyperkube-rhel9@sha256:c13801aed0d078acc0473533ae59e58c819490a533e9d524dacafb589fee863a_amd64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:d275e58d44a3fdec7e62e32b4230233ca615979f6ded1c86cc78392fbd852274_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-config-operator@sha256:d275e58d44a3fdec7e62e32b4230233ca615979f6ded1c86cc78392fbd852274_arm64, openshift4/ose-machine-config-operator@sha256:d275e58d44a3fdec7e62e32b4230233ca615979f6ded1c86cc78392fbd852274_arm64, * |
| Red Hat | openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x, openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x, openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:865197d99e2d5edc4ab5e0c72def3d86b169cf529fa0c09399c91e348cd5cb5b_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:865197d99e2d5edc4ab5e0c72def3d86b169cf529fa0c09399c91e348cd5cb5b_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:865197d99e2d5edc4ab5e0c72def3d86b169cf529fa0c09399c91e348cd5cb5b_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:865197d99e2d5edc4ab5e0c72def3d86b169cf529fa0c09399c91e348cd5cb5b_ppc64le |
| Red Hat | openshift4/ose-installer@sha256:71ae242bc441ed66071eef553d9ef6443d71ca994cdae485720cc4cd68d7ae12_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-installer@sha256:71ae242bc441ed66071eef553d9ef6443d71ca994cdae485720cc4cd68d7ae12_amd64, openshift4/ose-installer@sha256:71ae242bc441ed66071eef553d9ef6443d71ca994cdae485720cc4cd68d7ae12_amd64, openshift4/ose-installer@sha256:71ae242bc441ed66071eef553d9ef6443d71ca994cdae485720cc4cd68d7ae12_amd64 |
| Red Hat | openshift4/ose-cluster-version-operator@sha256:650425ecae9182388e24616b6568e7918d04ee37413f9c3594de02207da3f78d_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-version-operator@sha256:650425ecae9182388e24616b6568e7918d04ee37413f9c3594de02207da3f78d_amd64, openshift4/ose-cluster-version-operator@sha256:650425ecae9182388e24616b6568e7918d04ee37413f9c3594de02207da3f78d_amd64, openshift4/ose-cluster-version-operator@sha256:650425ecae9182388e24616b6568e7918d04ee37413f9c3594de02207da3f78d_amd64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x, openshift4/ose-tools-rhel8@sha256:db3c0e397b1dee3b4c7c279443cdcd9497326da73d925a2cb2a9232a18f71a5f_s390x, * |
| Red Hat | openshift4/ose-machine-config-operator@sha256:38b7ec13b5a57c8292109d9a3a6fe9af8b81d96f03b818f71c144551638ef0ff_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-config-operator@sha256:38b7ec13b5a57c8292109d9a3a6fe9af8b81d96f03b818f71c144551638ef0ff_s390x, *, * |
| Red Hat | openshift4/network-tools-rhel8@sha256:2bfa58536d2442bbce5e39ccb296c052789488ffd3227c78199507a3d11a0c50_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/network-tools-rhel8@sha256:2bfa58536d2442bbce5e39ccb296c052789488ffd3227c78199507a3d11a0c50_s390x, *, openshift4/network-tools-rhel8@sha256:2bfa58536d2442bbce5e39ccb296c052789488ffd3227c78199507a3d11a0c50_s390x |
| Red Hat | openshift4/ose-cluster-version-operator@sha256:8ff763cb3796258f4175e675c36a1fa4197b40831e0da8e59eed27a428b7a1eb_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-version-operator@sha256:8ff763cb3796258f4175e675c36a1fa4197b40831e0da8e59eed27a428b7a1eb_ppc64le, *, * |
…and 206 more
Timeline
- Mar 27, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1458 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-10795 advisory
- https://issues.redhat.com/browse/OCPBUGS-18640 advisory
- https://issues.redhat.com/browse/OCPBUGS-23205 advisory
- https://issues.redhat.com/browse/OCPBUGS-29237 advisory
- https://issues.redhat.com/browse/OCPBUGS-30027 advisory
- https://issues.redhat.com/browse/OCPBUGS-30878 advisory
- https://issues.redhat.com/browse/OCPBUGS-30980 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1458.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
- https://access.redhat.com/security/cve/CVE-2023-44487 advisory
- https://go.dev/issue/63417 advisory
- https://pkg.go.dev/vuln/GO-2023-2102 advisory
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 advisory
…and 4 more