Showing 1 - 25 of 87

CVE-2023-39325

Status Candidate

Overview

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.

Related Files

Red Hat Security Advisory 2023-7604-03: Posted Dec 6, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7604-03 - Red Hat OpenShift Container Platform release 4.13.25 is now available with updates to packages and images that fix several bugs and add enhancements.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | a01638a1173466b29f2df1496c1efceee3f56d26984a6b9172caa663d2ecb4e1; Download | Favorite | View

Red Hat Security Advisory 2023-7602-03: Posted Dec 6, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7602-03 - Red Hat OpenShift Container Platform release 4.13.25 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | ec40c81127506ce07da5a22a41d45fc986cae5a3d6c4a329fe63b19b9a2c1cf9; Download | Favorite | View

Red Hat Security Advisory 2023-7599-03: Posted Dec 5, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7599-03 - Red Hat OpenShift Container Platform release 4.14.5 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | bd9c075d394730b859bd975fb64ffa6db3fc0fdcd8a381c9f889cff2cd3fb0d6; Download | Favorite | View

Red Hat Security Advisory 2023-7470-01: Posted Nov 30, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7470-01 - Red Hat OpenShift Container Platform release 4.14.4 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 385d670e3d2affbd5cfcb3fe65205509beaddd189d21a40a8a3b01ceb7456610; Download | Favorite | View

Red Hat Security Advisory 2023-7555-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7555-01 - OpenShift API for Data Protection 1.3.0 is now available. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 3d15e570ad7ed8f4fdce2112659eb9586abceabffcafeb50b719af0ed7495c49; Download | Favorite | View

Red Hat Security Advisory 2023-7522-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7522-01 - Red Hat OpenShift Virtualization release 4.13.6 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 8aafb3963e600e65e4e35ebdaf379cc2c052bbdd39b414de98b92cc2ee2e44ea; Download | Favorite | View

Red Hat Security Advisory 2023-7521-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7521-01 - Red Hat OpenShift Virtualization release 4.13.6 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 93c466099a483cb68c9e8bbf2b49c2abe10c36776a246fd5b268aaad84d26b1f; Download | Favorite | View

Red Hat Security Advisory 2023-7478-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7478-01 - Red Hat OpenShift Container Platform release 4.11.54 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 79379aa77b4e3e41d1cc592900cce382a5479488c641c66102fae7b72bf19578; Download | Favorite | View

Red Hat Security Advisory 2023-7475-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7475-01 - Red Hat OpenShift Container Platform release 4.13.24 is now available with updates to packages and images that fix several bugs and add enhancements.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 8e78ba5359364ec4ef0c2d5276c91bd80094a3b1a6d4b5227e2da867b37fdbec; Download | Favorite | View

Red Hat Security Advisory 2023-7474-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7474-01 - Red Hat OpenShift Container Platform release 4.13.24 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | f6dd6cd03c8ca6a7ecbe9237f2784a266fa75e4ae76039a139824aff991be894; Download | Favorite | View

Red Hat Security Advisory 2023-7469-01: Posted Nov 29, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7469-01 - Red Hat OpenShift Container Platform release 4.14.4 is now available with updates to packages and images that fix several bugs. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | bd4b94a8f50462010bc30a472d934e7ecc4ac008870d66d84837fa8f7a813409; Download | Favorite | View

Red Hat Security Advisory 2023-7322-01: Posted Nov 22, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7322-01 - Red Hat OpenShift Container Platform release 4.13.23 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 6bfba85cfc82d97f430980d98c351fffba1f302022ce9f0d3c902e06f868ab53; Download | Favorite | View

Red Hat Security Advisory 2023-6894-01: Posted Nov 22, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6894-01 - Red Hat OpenShift Container Platform release 4.12.44 is now available with updates to packages and images that fix several bugs and add enhancements.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 15ea49919b054c3f2a8aa08cc0d4a336838b3e158b1bf8ba8c0342c00c5a660d; Download | Favorite | View

Red Hat Security Advisory 2023-6893-01: Posted Nov 22, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6893-01 - Red Hat OpenShift Container Platform release 4.12.44 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | d8a63d19073e73faca5f571e6916573d647a75b4a291f4e1f48773ba645d9652; Download | Favorite | View

Red Hat Security Advisory 2023-7345-01: Posted Nov 20, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7345-01 - An update is now available for Red Hat OpenShift GitOps 1.9. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 7f590d3a92f6ce15ac98a79e4571a8c30ee7f3e6aff78e8619d203362f7d12b5; Download | Favorite | View

Red Hat Security Advisory 2023-7344-01: Posted Nov 20, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7344-01 - An update for openshift-gitops-kam is now available for Red Hat OpenShift GitOps 1.9. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 0e97dfb4dff737d1e8128de6c336e92e6dc73608eb82205c29dbbe035eb30750; Download | Favorite | View

Red Hat Security Advisory 2023-7342-01: Posted Nov 17, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7342-01 - An update for cnf-tests-container, dpdk-base-container and performance-addon-operator-must-gather-rhel8-container is now available for Red Hat OpenShift Container Platform 4.11. Secondary scheduler builds and numaresources-operator are also available for technical preview with this release, however they are not intended for production.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 91e828fcb5b05d38eb43d43dbf732dd801ef1a0b0edf1c0214fc80ad7fcb45a6; Download | Favorite | View

Red Hat Security Advisory 2023-6841-01: Posted Nov 17, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6841-01 - An update is now available for Red Hat OpenShift Container Platform 4.12.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 0bd50a93b780548c85981478beb477a94f448982d1065fc240d42a3fa407426d; Download | Favorite | View

Red Hat Security Advisory 2023-6846-01: Posted Nov 16, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6846-01 - Red Hat OpenShift Container Platform release 4.13.22 is now available with updates to packages and images that fix several bugs and add enhancements.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 8e41f911585e1f633c8e6860721470fcec57e34ed1dc38b2adb6615fc318485e; Download | Favorite | View

Red Hat Security Advisory 2023-6845-01: Posted Nov 16, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6845-01 - Red Hat OpenShift Container Platform release 4.13.22 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 5279a9c91c4b72abe3bc0c28d7376d2a61157a27a77dbff98ffce466f4ea5367; Download | Favorite | View

Red Hat Security Advisory 2023-6839-01: Posted Nov 16, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6839-01 - Red Hat build of MicroShift release 4.14.2 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 319a57a7cba3081cc7ad0d2b421860cb46faa10b41008eafdc3db8224d6c8574; Download | Favorite | View

Red Hat Security Advisory 2023-6836-01: Posted Nov 16, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6836-01 - Red Hat OpenShift Container Platform release 4.14.2 is now available with updates to packages and images that fix several bugs.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 53357c2ea1f943f3a8bac4fa0309fe4cf847b458272342965649381dead54689; Download | Favorite | View

Red Hat Security Advisory 2023-7215-01: Posted Nov 15, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-7215-01 - Red Hat OpenShift Service Mesh 2.2.12 Containers. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 6d1253a2d836bfe19a447c5f5225572639832058274c9490b917244992bf387c; Download | Favorite | View

Red Hat Security Advisory 2023-6269-01: Posted Nov 15, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6269-01 - cert-manager Operator for Red Hat OpenShift 1.12.1. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | 6a8c7ae2aee116018a2728074e6a8f84ae2eac5907ccc1317d0f62acf5c8d08e; Download | Favorite | View

Red Hat Security Advisory 2023-6828-01: Posted Nov 13, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-6828-01 - Updated images are now available for Red Hat Advanced Cluster Security.; tags | advisory; systems | linux, redhat; advisories | CVE-2023-39325; SHA-256 | bfc02bee2ed0e7339fcd76f37ec36f00ddcead3770ed5199401a84a44846fd58; Download | Favorite | View

Page 1 of 4 Back 1 2 3 4 Next

Top Authors In Last 30 Days

Red Hat 396 files
Ubuntu 97 files
Debian 30 files
Rahad Chowdhury 21 files
BugsBD Limited 21 files
Gentoo 18 files
tmrswrr 13 files
Google Security Research 5 files
Ph0s 5 files
R0ckE7 5 files

File Archives

Systems

AIX (429)
Apple (2,037)
BSD (375)
CentOS (57)
Cisco (1,926)
Debian (6,914)
Fedora (1,692)
FreeBSD (1,246)
Gentoo (4,379)
HPUX (880)
iOS (363)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (47,862)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (486)
RedHat (14,631)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,142)
UNIX (9,340)
UnixWare (187)
Windows (6,607)
Other

CVE-2023-39325

Overview

Related Files

File Archive:

December 2023

Top Authors In Last 30 Days

File Tags

File Archives

Systems