VDB
RHSA-2024%3A1765
RHSA-2024%3A1765
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:f7642f1f7a7bc4b7a85b3ad4a0c658c2cb481f04d5c449bdbc3c8576fb376334_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:f7642f1f7a7bc4b7a85b3ad4a0c658c2cb481f04d5c449bdbc3c8576fb376334_s390x, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:f7642f1f7a7bc4b7a85b3ad4a0c658c2cb481f04d5c449bdbc3c8576fb376334_s390x |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:85f567090190c72b86e5d3848d73a08604fcb6a2929c4e5aad40c5c6d8aba08e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:85f567090190c72b86e5d3848d73a08604fcb6a2929c4e5aad40c5c6d8aba08e_ppc64le |
| Red Hat | openshift4/ose-machine-api-provider-gcp-rhel8@sha256:748d9f7bffb3643d3c910c74b120041b8c47544122c1e851aad5800c01d56bfb_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-provider-gcp-rhel8@sha256:748d9f7bffb3643d3c910c74b120041b8c47544122c1e851aad5800c01d56bfb_arm64, openshift4/ose-machine-api-provider-gcp-rhel8@sha256:748d9f7bffb3643d3c910c74b120041b8c47544122c1e851aad5800c01d56bfb_arm64, openshift4/ose-machine-api-provider-gcp-rhel8@sha256:748d9f7bffb3643d3c910c74b120041b8c47544122c1e851aad5800c01d56bfb_arm64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:34080ef5bf8ac63097a78efe2ceaa3839888beefc0bd81bf78c16b54d1bc6d0e_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:d2644335fc09343ca81e00cd7abc389cc0cb8f0f6bbd279b0cc981757d1b7cb3_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:d2644335fc09343ca81e00cd7abc389cc0cb8f0f6bbd279b0cc981757d1b7cb3_amd64, *, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:d2644335fc09343ca81e00cd7abc389cc0cb8f0f6bbd279b0cc981757d1b7cb3_amd64 |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:bcfcfb9c406ef4dfe2c25eb8fdd98e9be0eaa2b2f176f4c1097a81655dad0934_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-prometheus-node-exporter@sha256:bcfcfb9c406ef4dfe2c25eb8fdd98e9be0eaa2b2f176f4c1097a81655dad0934_s390x, openshift4/ose-prometheus-node-exporter@sha256:bcfcfb9c406ef4dfe2c25eb8fdd98e9be0eaa2b2f176f4c1097a81655dad0934_s390x |
| Red Hat | openshift4/ose-csi-external-snapshotter@sha256:96a2ab3c309050d6ee2e03f19d0bec41848983c94c8320ea0218272e6a2f8b51_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-csi-external-snapshotter@sha256:96a2ab3c309050d6ee2e03f19d0bec41848983c94c8320ea0218272e6a2f8b51_arm64 |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64, openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64, openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64 |
| Red Hat | openshift4/ose-prometheus-operator@sha256:6d70fe860d29db218d62ec91d1f093f3abef0e66b871e13f2d4109f3f6c85ff2_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-prometheus-operator@sha256:6d70fe860d29db218d62ec91d1f093f3abef0e66b871e13f2d4109f3f6c85ff2_amd64, *, openshift4/ose-prometheus-operator@sha256:6d70fe860d29db218d62ec91d1f093f3abef0e66b871e13f2d4109f3f6c85ff2_amd64 |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:b506e68d1622bde1d293660c14d943432090242f51145970aa482243447dfcef_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-baremetal-installer-rhel8@sha256:b506e68d1622bde1d293660c14d943432090242f51145970aa482243447dfcef_ppc64le, openshift4/ose-baremetal-installer-rhel8@sha256:b506e68d1622bde1d293660c14d943432090242f51145970aa482243447dfcef_ppc64le, openshift4/ose-baremetal-installer-rhel8@sha256:b506e68d1622bde1d293660c14d943432090242f51145970aa482243447dfcef_ppc64le |
| Red Hat | openshift4/ose-prometheus@sha256:b3a764f786507446522862b6d42e78222e57fc60efbdb03844fd20108c20d982_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-prometheus@sha256:b3a764f786507446522862b6d42e78222e57fc60efbdb03844fd20108c20d982_ppc64le |
| Red Hat | openshift4/ovirt-csi-driver-rhel8-operator@sha256:787ec81585910294f87b39a57a83e55ad2c60489e0f32e3257865fcf0b9ad464_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ovirt-csi-driver-rhel8-operator@sha256:787ec81585910294f87b39a57a83e55ad2c60489e0f32e3257865fcf0b9ad464_ppc64le, openshift4/ovirt-csi-driver-rhel8-operator@sha256:787ec81585910294f87b39a57a83e55ad2c60489e0f32e3257865fcf0b9ad464_ppc64le, openshift4/ovirt-csi-driver-rhel8-operator@sha256:787ec81585910294f87b39a57a83e55ad2c60489e0f32e3257865fcf0b9ad464_ppc64le |
| Red Hat | openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:15be04ec303631f222760674dc6eb1725e9de291df1f6b556701a767b4e6fe18_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:15be04ec303631f222760674dc6eb1725e9de291df1f6b556701a767b4e6fe18_amd64, *, openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:15be04ec303631f222760674dc6eb1725e9de291df1f6b556701a767b4e6fe18_amd64 |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:65d31b4f9d5b2af4ef23906bed3535903dd8081e5f3f8bc7a82bb54401d0b10c_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:65d31b4f9d5b2af4ef23906bed3535903dd8081e5f3f8bc7a82bb54401d0b10c_s390x, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:65d31b4f9d5b2af4ef23906bed3535903dd8081e5f3f8bc7a82bb54401d0b10c_s390x, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:65d31b4f9d5b2af4ef23906bed3535903dd8081e5f3f8bc7a82bb54401d0b10c_s390x |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:b633f3558737c6eca17bc2420be82c9b7a91c3b1a57f534fdb509ddd772df419_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-oauth-apiserver-rhel8@sha256:b633f3558737c6eca17bc2420be82c9b7a91c3b1a57f534fdb509ddd772df419_ppc64le, openshift4/ose-oauth-apiserver-rhel8@sha256:b633f3558737c6eca17bc2420be82c9b7a91c3b1a57f534fdb509ddd772df419_ppc64le |
| Red Hat | openshift4/ovirt-csi-driver-rhel8-operator@sha256:4dd3c64791bee6040640f9f3754bb2c311fe61991e83c2511401838d3e0eb4f7_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ovirt-csi-driver-rhel8-operator@sha256:4dd3c64791bee6040640f9f3754bb2c311fe61991e83c2511401838d3e0eb4f7_amd64, *, openshift4/ovirt-csi-driver-rhel8-operator@sha256:4dd3c64791bee6040640f9f3754bb2c311fe61991e83c2511401838d3e0eb4f7_amd64 |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64, openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64, openshift4/ose-machine-os-images-rhel8@sha256:f63615928f4f655a5e49a28a8791ef9d57ba5475f9a4ab79d9a55ca2893b5401_arm64 |
| Red Hat | openshift4/ose-alibaba-machine-controllers-rhel8@sha256:80c0e683c334dbd16ae2d501731ebd5a57c931a0e5fa0ddcbc570ef5cb03df8e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-alibaba-machine-controllers-rhel8@sha256:80c0e683c334dbd16ae2d501731ebd5a57c931a0e5fa0ddcbc570ef5cb03df8e_amd64, openshift4/ose-alibaba-machine-controllers-rhel8@sha256:80c0e683c334dbd16ae2d501731ebd5a57c931a0e5fa0ddcbc570ef5cb03df8e_amd64, * |
| Red Hat | openshift4/ose-vsphere-csi-driver-rhel8@sha256:1a6021f8a08c80bceb45a63c31e4cb72ffe4c6cb7a9a2fa2238e1bca4a007772_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-vsphere-csi-driver-rhel8@sha256:1a6021f8a08c80bceb45a63c31e4cb72ffe4c6cb7a9a2fa2238e1bca4a007772_amd64, openshift4/ose-vsphere-csi-driver-rhel8@sha256:1a6021f8a08c80bceb45a63c31e4cb72ffe4c6cb7a9a2fa2238e1bca4a007772_amd64, openshift4/ose-vsphere-csi-driver-rhel8@sha256:1a6021f8a08c80bceb45a63c31e4cb72ffe4c6cb7a9a2fa2238e1bca4a007772_amd64 |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:9621cd376e03c862b233e5f4b2cbb58a49683f75137682469d6f234c0b57a4a4_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:9621cd376e03c862b233e5f4b2cbb58a49683f75137682469d6f234c0b57a4a4_arm64, *, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:9621cd376e03c862b233e5f4b2cbb58a49683f75137682469d6f234c0b57a4a4_arm64 |
…and 1242 more
Timeline
- Apr 18, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1765 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-28746 advisory
- https://issues.redhat.com/browse/OCPBUGS-29783 advisory
- https://issues.redhat.com/browse/OCPBUGS-30749 advisory
- https://issues.redhat.com/browse/OCPBUGS-31212 advisory
- https://issues.redhat.com/browse/OCPBUGS-31316 advisory
- https://issues.redhat.com/browse/OCPBUGS-31332 advisory
- https://issues.redhat.com/browse/OCPBUGS-31338 advisory
- https://issues.redhat.com/browse/OCPBUGS-31417 advisory
- https://issues.redhat.com/browse/OCPBUGS-31428 advisory
- https://issues.redhat.com/browse/OCPBUGS-31621 advisory
- https://issues.redhat.com/browse/OCPBUGS-31657 advisory
- https://issues.redhat.com/browse/OCPBUGS-31681 advisory
- https://issues.redhat.com/browse/OCPBUGS-31752 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1765.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
…and 18 more