Lucene search

K
redhatRedHatRHSA-2023:6305
HistoryNov 06, 2023 - 11:23 a.m.

(RHSA-2023:6305) Important: Migration Toolkit for Applications security update

2023-11-0611:23:02
access.redhat.com
27
golang net/http x/net/http2 http/2 ddos attack rapid reset attack cve-2023-44487 cve-2023-39325 cvss unix

0.732 High

EPSS

Percentile

98.1%

Migration Toolkit for Applications 6.1.4 Images.

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.