Skip to content
Fencer Vulns
high 7.5

CVE-2023-6596 json

Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)

published 2024-04-25 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-58820

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits
0
none known

Summary

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

Patch / fix

  • Red Hat Red Hat OpenShift Container Platform 4.11 v4.11.0-202401301508.p0.g5ea0428.assembly.stream
  • Red Hat Red Hat OpenShift Container Platform 4.12 v4.12.0-202401190520.p0.g4b287bd.assembly.stream

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-6596 updated cvss 7.5

openshift: incomplete fix for Rapid Reset (CVE-2023-44487/CVE-2023-39325)

  • Red Hat OpenShift Container Platform 4.11 openshift4/ose-operator-lifecycle-manager v4.11.0-202401301508.p0.g5ea0428.assembly.stream
    fixed: vendor fix RHSA-2024:0682
  • Red Hat OpenShift Container Platform 4.12 openshift4/ose-operator-lifecycle-manager v4.12.0-202401190520.p0.g4b287bd.assembly.stream
    fixed: vendor fix RHSA-2024:0485
  • Red Hat OpenShift Container Platform 4 openshift4/ose-olm-rukpak-rhel8 Red Hat OpenShift Container Platform 4.11 rhcos 411.86.202402040351-0, openshift4/ose-cli v4.11.0-202401291254.p0.gbf40a6c.assembly.stream, openshift4/ose-pod v4.11.0-202401291254.p0.g2e1e137.assembly.stream, openshift4/ose-etcd v4.11.0-202401291254.p0.ge73305f.assembly.stream, openshift4/ose-tests v4.11.0-202402040436.p0.gb34b8a2.assembly.stream, openshift4/ose-console v4.11.0-202401291254.p0.g71da8a5.assembly.stream, +176 more Red Hat OpenShift Container Platform 4.12 rhcos 412.86.202401201721-0, openshift4/ose-cli v4.12.0-202401190520.p0.gd4c9e3c.assembly.stream, openshift4/ose-pod v4.12.0-202401190520.p0.g6df2177.assembly.stream, openshift4/ose-etcd v4.12.0-202401201708.p0.gbb43fb5.assembly.stream, openshift4/ose-tests v4.12.0-202401190520.p0.g7b7d4ef.assembly.stream, openshift4/ose-console v4.12.0-202401190520.p0.g136b525.assembly.stream, +181 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Red Hat Red Hat OpenShift Container Platform 4.11
  • Red Hat Red Hat OpenShift Container Platform 4.12
  • Red Hat Red Hat OpenShift Container Platform 4

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.