RHBA-2023:7586
Vulnerability from csaf_redhat - Published: 2023-11-29 17:21 - Updated: 2026-08-11 20:49Summary
Red Hat Bug Fix Advisory: LVMS 4.13.z Bug Fix and Enhancement update
Severity
Important
Notes
Topic: Updated container images that fix multiple bugs are now available
for LVMS 4.13.z.
Details: Logical volume manager storage (LVMS) uses the TopoLVM CSI driver to
dynamically provision local storage on single node OpenShift clusters.
Logical volume manager storage creates thin-provisioned volumes using the
Logical Volume Manager and provides dynamic provisioning of block storage
on a single node, limited resources SNO cluster.
Users of LVMS are advised to upgrade to the latest version of the LVMS in
OpenShift Container Platform, which fixes these bugs and adds these
enhancements.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated container images that fix multiple bugs are now available\nfor LVMS 4.13.z.",
"title": "Topic"
},
{
"category": "general",
"text": "Logical volume manager storage (LVMS) uses the TopoLVM CSI driver to\ndynamically provision local storage on single node OpenShift clusters.\n\nLogical volume manager storage creates thin-provisioned volumes using the\nLogical Volume Manager and provides dynamic provisioning of block storage\non a single node, limited resources SNO cluster.\n\nUsers of LVMS are advised to upgrade to the latest version of the LVMS in\nOpenShift Container Platform, which fixes these bugs and adds these\nenhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2023:7586",
"url": "https://access.redhat.com/errata/RHBA-2023:7586"
},
{
"category": "external",
"summary": "OCPBUGS-22383",
"url": "https://issues.redhat.com/browse/OCPBUGS-22383"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_7586.json"
}
],
"title": "Red Hat Bug Fix Advisory: LVMS 4.13.z Bug Fix and Enhancement update",
"tracking": {
"current_release_date": "2026-08-11T20:49:04+00:00",
"generator": {
"date": "2026-08-11T20:49:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHBA-2023:7586",
"initial_release_date": "2023-11-29T17:21:36+00:00",
"revision_history": [
{
"date": "2023-11-29T17:21:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-11-29T17:21:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T20:49:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "LVMS 4.13 for RHEL 8",
"product": {
"name": "LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:lvms:4.13::el8"
}
}
}
],
"category": "product_family",
"name": "logical volume manager storage"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"product_id": "lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"product_id": "lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"product_id": "lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.2-1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"product_id": "lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"product_id": "lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.2-1"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"product_id": "lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"product_id": "lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"product_id": "lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.2-1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"product_id": "lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.2-2"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64",
"product_id": "lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.2-1"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-39325",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2023-10-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2243296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as \u0027Important\u0027 as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE is related to CVE-2023-44487.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.\n\nAs go-lang vendors its dependencies, a package may contain a library with a known vulnerability, solely because of lower tier libraries including it as a part of its dependencies, but the vulnerable code is not reachable at runtime. In such cases the issue is not exploitable. We classify these situations as \u201cNot affected\u201d or \u201cWill not fix,\u201d depending on the risk of breaking other unrelated packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39325"
},
{
"category": "external",
"summary": "RHBZ#2243296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296"
},
{
"category": "external",
"summary": "RHSB-2023-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-44487",
"url": "https://access.redhat.com/security/cve/CVE-2023-44487"
},
{
"category": "external",
"summary": "https://go.dev/issue/63417",
"url": "https://go.dev/issue/63417"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2023-2102",
"url": "https://pkg.go.dev/vuln/GO-2023-2102"
},
{
"category": "external",
"summary": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487"
}
],
"release_date": "2023-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-11-29T17:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2023:7586"
},
{
"category": "workaround",
"details": "The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:12885b6b6d64c105689508aea0a90902842c4bbbf21d4bc6ef26d8e35b6f1b50_amd64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:542d07477c08ac6b698b8bd98240228e21c745c32358f652d4329ddaea5767f1_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:933f866c0e4dabdfe0497e77fe8d850707c91db9471ed2467aa455a40dc03735_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:f7ca5e42ceb94f5ae70309a1631be95d86fe39949465e98e85b06aaf831629b0_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:2b2dd11ad74ab33990e344fd79fabcd58f0928a33136a924893a849e1dfd8ade_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:3d8d44a805b25585e9f608742d5c53d0e916cfd6abc7a399064d30325b0bfa78_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:756f7e22c29de4cd4739f3ac3fc2ae3af691ed16bf26e7793b21d40dc585ae57_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:7c33481a369c17e94fb1568ff83487a582a759b8efef0008a4b8429d2b42d9fc_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:24b36f1f27e9ef5f093949a185234847d64841e607492e86ed09403b82e1c100_arm64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:320ae528ed8805b724766978dc54639611f55057355a4a9e6bf1f4570076ad73_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:36ffda49af83825b6d19c88b397db19e01862e61d9cd297ee872998fd03aa372_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:a4f5c04f02980663ab608cc7909f23d71d8009a217f8ac9a4bb4ae525c9acba4_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:4dc9659b98f993354fc39cb422a06f320200030c2e65575320badecf2b8b5afe_amd64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:869b4218a53fa8b4466dd0a2085994091a2b7f24715937867aa8066f87ef64ee_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:ae57a8c475013bc7dc67ef235de52ab04f2f3d8f2c04de81e1ab77101e578331_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:d6b502771393b18780dcb972cce1cf386e8c1eff783a0532d5a518b17278d7df_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…