RHSA-2023:6305: Important: Migration Toolkit for Applications security update
Migration Toolkit for Applications 6.1.4 Images.Security Fix(es): golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:6305?
RHSA-2023:6305 is classified as important due to vulnerabilities that can lead to Denial of Service attacks.
How do I fix RHSA-2023:6305?
To fix RHSA-2023:6305, update the Migration Toolkit for Applications to version 6.1.4 or later.
What vulnerabilities are addressed in RHSA-2023:6305?
RHSA-2023:6305 addresses CVE-2023-44487 and CVE-2023-39325 related to excessive work from rapid stream resets in HTTP/2.
What systems are affected by RHSA-2023:6305?
RHSA-2023:6305 affects systems running the Migration Toolkit for Applications 6.1.4.
Is there a risk of Denial of Service with RHSA-2023:6305?
Yes, RHSA-2023:6305 presents a risk of Denial of Service due to vulnerabilities in multiple HTTP/2 enabled web servers.