VDB

RHSA-2024%3A1572

RHSA-2024%3A1572 PUBLISHED CVSS 7.5 HIGH

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-multus-networkpolicy-rhel8@sha256:84968bc5d0e539e39dbe1d9a345b655a5dc72291bf0c1d5d126d36e71fb46920_s390x as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-multus-networkpolicy-rhel8@sha256:84968bc5d0e539e39dbe1d9a345b655a5dc72291bf0c1d5d126d36e71fb46920_s390x, openshift4/ose-multus-networkpolicy-rhel8@sha256:84968bc5d0e539e39dbe1d9a345b655a5dc72291bf0c1d5d126d36e71fb46920_s390x
Red Hatopenshift4/ovirt-csi-driver-rhel8@sha256:77a060bcc849a1b9e234b9d8dc3739515828e9d814ed4760a6aaaad9598b312e_s390x as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ovirt-csi-driver-rhel8@sha256:77a060bcc849a1b9e234b9d8dc3739515828e9d814ed4760a6aaaad9598b312e_s390x, openshift4/ovirt-csi-driver-rhel8@sha256:77a060bcc849a1b9e234b9d8dc3739515828e9d814ed4760a6aaaad9598b312e_s390x
Red Hatopenshift4/ose-oauth-apiserver-rhel8@sha256:c8d8b7ee6bfac9b7e37ae6fb6b1e5c5d7e47367fba9119ba025296a6da69fcf3_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-oauth-apiserver-rhel8@sha256:c8d8b7ee6bfac9b7e37ae6fb6b1e5c5d7e47367fba9119ba025296a6da69fcf3_s390x, *, openshift4/ose-oauth-apiserver-rhel8@sha256:c8d8b7ee6bfac9b7e37ae6fb6b1e5c5d7e47367fba9119ba025296a6da69fcf3_s390x
Red Hatopenshift4/ose-cloud-credential-operator@sha256:7d64aa01313353bf0d9dd79968ca61ff8c16553cd08a925d9ef05fae3cf35dcf_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cloud-credential-operator@sha256:7d64aa01313353bf0d9dd79968ca61ff8c16553cd08a925d9ef05fae3cf35dcf_amd64, openshift4/ose-cloud-credential-operator@sha256:7d64aa01313353bf0d9dd79968ca61ff8c16553cd08a925d9ef05fae3cf35dcf_amd64, openshift4/ose-cloud-credential-operator@sha256:7d64aa01313353bf0d9dd79968ca61ff8c16553cd08a925d9ef05fae3cf35dcf_amd64
Red Hatopenshift4/ose-openshift-controller-manager-rhel8@sha256:13a7589aac9e6825256feb5000925600b6ffe89e0a4d22acf6910d731ab9a853_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, *
Red Hatopenshift4/ose-machine-os-images-rhel8@sha256:7f112ad126f1e6b27c73586511a41a888c265d4fc50ac051cf8f317f1a73cbf2_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-machine-os-images-rhel8@sha256:7f112ad126f1e6b27c73586511a41a888c265d4fc50ac051cf8f317f1a73cbf2_arm64, openshift4/ose-machine-os-images-rhel8@sha256:7f112ad126f1e6b27c73586511a41a888c265d4fc50ac051cf8f317f1a73cbf2_arm64, *
Red Hatrhcos@sha256:57695a6095b3469398890c8e575fc99c29730ddc345683e296b055eea9800ece_s390x as a component of Red Hat OpenShift Container Platform 4.12rhcos@sha256:57695a6095b3469398890c8e575fc99c29730ddc345683e296b055eea9800ece_s390x, rhcos@sha256:57695a6095b3469398890c8e575fc99c29730ddc345683e296b055eea9800ece_s390x, rhcos@sha256:57695a6095b3469398890c8e575fc99c29730ddc345683e296b055eea9800ece_s390x
Red Hatopenshift4/ose-cluster-kube-scheduler-operator@sha256:3809927f588c88859f7e6ef889f04b500aed3e685382333c41aaaf1220e3928d_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-kube-scheduler-operator@sha256:3809927f588c88859f7e6ef889f04b500aed3e685382333c41aaaf1220e3928d_s390x, openshift4/ose-cluster-kube-scheduler-operator@sha256:3809927f588c88859f7e6ef889f04b500aed3e685382333c41aaaf1220e3928d_s390x, openshift4/ose-cluster-kube-scheduler-operator@sha256:3809927f588c88859f7e6ef889f04b500aed3e685382333c41aaaf1220e3928d_s390x
Red Hatopenshift4/ose-kube-proxy@sha256:0b330a08ae095b696241e7725482f02522cc060ee2928349c02d300d16177015_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-kube-proxy@sha256:0b330a08ae095b696241e7725482f02522cc060ee2928349c02d300d16177015_amd64, openshift4/ose-kube-proxy@sha256:0b330a08ae095b696241e7725482f02522cc060ee2928349c02d300d16177015_amd64, openshift4/ose-kube-proxy@sha256:0b330a08ae095b696241e7725482f02522cc060ee2928349c02d300d16177015_amd64
Red Hatopenshift4/ose-docker-builder@sha256:65e6bd134843164ef66384534ebb063c135e6b68f45be452ef7f2d86ce2d78ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-docker-builder@sha256:65e6bd134843164ef66384534ebb063c135e6b68f45be452ef7f2d86ce2d78ea_ppc64le, openshift4/ose-docker-builder@sha256:65e6bd134843164ef66384534ebb063c135e6b68f45be452ef7f2d86ce2d78ea_ppc64le, *
Red Hatopenshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:29210dcc649843559bb86b874e41b4eb16eef71282f67b43989d68ba22d635e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:29210dcc649843559bb86b874e41b4eb16eef71282f67b43989d68ba22d635e1_ppc64le, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:29210dcc649843559bb86b874e41b4eb16eef71282f67b43989d68ba22d635e1_ppc64le, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:29210dcc649843559bb86b874e41b4eb16eef71282f67b43989d68ba22d635e1_ppc64le
Red Hatopenshift4/ose-libvirt-machine-controllers@sha256:e89aa49ed079765a31a98f1d17b0ff02f5ac10e62f455be0e31f0bf4be1cefcf_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-libvirt-machine-controllers@sha256:e89aa49ed079765a31a98f1d17b0ff02f5ac10e62f455be0e31f0bf4be1cefcf_amd64, *, openshift4/ose-libvirt-machine-controllers@sha256:e89aa49ed079765a31a98f1d17b0ff02f5ac10e62f455be0e31f0bf4be1cefcf_amd64
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:6bfe16bb881f02aa54b79a77593409a6fb0fdefdd1879742a53edc44dccf5d58_amd64 as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:6bfe16bb881f02aa54b79a77593409a6fb0fdefdd1879742a53edc44dccf5d58_amd64
Red Hatopenshift4/egress-router-cni-rhel8@sha256:6c1c817d69eaf62c43078505b7a0751fa9852a9dc5c8f94fcb403737c51f0caa_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/egress-router-cni-rhel8@sha256:6c1c817d69eaf62c43078505b7a0751fa9852a9dc5c8f94fcb403737c51f0caa_arm64, openshift4/egress-router-cni-rhel8@sha256:6c1c817d69eaf62c43078505b7a0751fa9852a9dc5c8f94fcb403737c51f0caa_arm64, *
Red Hatopenshift4/ose-kube-proxy@sha256:2ceba7d31c1e949b22bd7e93d78c3ad45fb688e5a6ba0f71c02bee3fc32b86df_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-kube-proxy@sha256:2ceba7d31c1e949b22bd7e93d78c3ad45fb688e5a6ba0f71c02bee3fc32b86df_ppc64le
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:26961606deb9b1ed5ae3b274e976543016b46297bd60b0ca99094b4698a1ea35_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-csi-node-driver-registrar@sha256:26961606deb9b1ed5ae3b274e976543016b46297bd60b0ca99094b4698a1ea35_amd64, *, openshift4/ose-csi-node-driver-registrar@sha256:26961606deb9b1ed5ae3b274e976543016b46297bd60b0ca99094b4698a1ea35_amd64
Red Hatopenshift4/ose-network-interface-bond-cni-rhel8@sha256:84e3abefc82812cfbde81229745e2bb876d8f6db19039c39f01f28ca249db42f_s390x as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-network-interface-bond-cni-rhel8@sha256:84e3abefc82812cfbde81229745e2bb876d8f6db19039c39f01f28ca249db42f_s390x, *
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cf25050238da2c3d5b673d7a94898b676d0d5e884d058ae55dae7993efd954f3_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cf25050238da2c3d5b673d7a94898b676d0d5e884d058ae55dae7993efd954f3_amd64, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cf25050238da2c3d5b673d7a94898b676d0d5e884d058ae55dae7993efd954f3_amd64, *
Red Hatopenshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:60e5e15d337ff61bcca8a02bce8b1759b8b4f10f4a9f97d196e0877550c16755_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:60e5e15d337ff61bcca8a02bce8b1759b8b4f10f4a9f97d196e0877550c16755_s390x, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:60e5e15d337ff61bcca8a02bce8b1759b8b4f10f4a9f97d196e0877550c16755_s390x, *
Red Hatopenshift4/cloud-network-config-controller-rhel8@sha256:eade2e556e8b7778b4e6456724f62ace3c5e8f7f312a9591a17a755142df072c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/cloud-network-config-controller-rhel8@sha256:eade2e556e8b7778b4e6456724f62ace3c5e8f7f312a9591a17a755142df072c_ppc64le, openshift4/cloud-network-config-controller-rhel8@sha256:eade2e556e8b7778b4e6456724f62ace3c5e8f7f312a9591a17a755142df072c_ppc64le

…and 1240 more

Timeline

  • Apr 3, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 16, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›