CVE-2023-6596 - Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)

HIGH

Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)

Published Apr 25, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.79%

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

Red Hat OpenShift Container Platform 4.11

openshift4/ose-operator-lifecycle-manager:v4.11.0-202401301508.p0.g5ea0428.assembly.stream

Fixed · RHSA-2024:0682
Red Hat OpenShift Container Platform 4.12

openshift4/ose-operator-lifecycle-manager:v4.12.0-202401190520.p0.g4b287bd.assembly.stream

Fixed · RHSA-2024:0485
Red Hat OpenShift Container Platform 4

openshift4/ose-olm-rukpak-rhel8

Not affected

Product	Package	State	Advisory
Red Hat OpenShift Container Platform 4.11	openshift4/ose-operator-lifecycle-manager:v4.11.0-202401301508.p0.g5ea0428.assembly.stream	Fixed	RHSA-2024:0682
Red Hat OpenShift Container Platform 4.12	openshift4/ose-operator-lifecycle-manager:v4.12.0-202401190520.p0.g4b287bd.assembly.stream	Fixed	RHSA-2024:0485
Red Hat OpenShift Container Platform 4	openshift4/ose-olm-rukpak-rhel8	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

Link	Providers	Tags
https://access.redhat.com/errata/RHSA-2024:0485		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0682		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-6596		vdb-entryx_refsource_REDHATVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2253521		issue-trackingx_refsource_REDHATIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58820		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-6596
https://www.cve.org/CVERecord?id=CVE-2023-6596