Lucene search

K
redhatRedHatRHSA-2023:6280
HistoryNov 02, 2023 - 10:23 a.m.

(RHSA-2023:6280) Important: Migration Toolkit for Applications security and bug fix update

2023-11-0210:23:17
access.redhat.com
34
migration toolkit
applications
security
bug fix
golang
http/2
ddos attack
cve-2023-44487
cve-2023-39325
rapid reset attack

7.9 High

AI Score

Confidence

High

0.732 High

EPSS

Percentile

98.1%

Migration Toolkit for Applications 6.2.1 Images

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.