VDB
RHBA-2020%3A0062
RHBA-2020%3A0062
PUBLISHED
CVSS 5.900000095367432 MEDIUM
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-pod@sha256:2dc3bdcb2b0bf1d6c6ae749be0163e6d7ca813ecfba5e5f5d88970c73a9d12a9_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-pod@sha256:2dc3bdcb2b0bf1d6c6ae749be0163e6d7ca813ecfba5e5f5d88970c73a9d12a9_amd64, * |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:31f0ce692cd5609e07271fd64c592255083ca4d09c78b46c3704e3d69545789d_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-cluster-kube-scheduler-operator@sha256:31f0ce692cd5609e07271fd64c592255083ca4d09c78b46c3704e3d69545789d_amd64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel7@sha256:248d2d3c94484a907bcf123d371f5349034802be877fc0cdab5391acf87da979_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-openshift-apiserver-rhel7@sha256:248d2d3c94484a907bcf123d371f5349034802be877fc0cdab5391acf87da979_amd64, * |
| Red Hat | openshift4/ose-ironic-inspector-rhel8@sha256:4222c6a327cad220e46861c9a4b7ea500f037cb5f2348f59dbebde1b73e51ce7_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-ironic-inspector-rhel8@sha256:4222c6a327cad220e46861c9a4b7ea500f037cb5f2348f59dbebde1b73e51ce7_amd64 |
| Red Hat | openshift4/ose-etcd@sha256:7c6de86b5f3140fa33a69477c286afc901b4ecd6e73e82d0ccfc8a0e0fe5e648_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:ffa87c992c5a2c51290e6d67cb609f29893dd147c31cff639ff6785ae7a1cfe2_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, * |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:db925a8ed36a1b705d7a88aefc59e96f92efa95277383c510ac1630f881d3f0c_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-prometheus-alertmanager@sha256:db925a8ed36a1b705d7a88aefc59e96f92efa95277383c510ac1630f881d3f0c_amd64 |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:8123e4286ee4ff5935c09efc2472a8d3ca35ce51e7e0f0f54ea2058cae6221d8_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:8123e4286ee4ff5935c09efc2472a8d3ca35ce51e7e0f0f54ea2058cae6221d8_amd64, * |
| Red Hat | openshift4/ose-jenkins@sha256:dd5f1c5d14a8a72aa4ca51224c26a661c2e4f19ea3e5f9b7d8343f4952de5f0d_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-jenkins@sha256:dd5f1c5d14a8a72aa4ca51224c26a661c2e4f19ea3e5f9b7d8343f4952de5f0d_amd64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:72b7df02f2f67c278036224111179c59b40342ce53d21be4c8d988af24c2f228_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-k8s-prometheus-adapter@sha256:72b7df02f2f67c278036224111179c59b40342ce53d21be4c8d988af24c2f228_amd64 |
| Red Hat | openshift4/ose-configmap-reloader@sha256:31938e349d61db5146e6387b05f5af2bd8f3aa822f93d2d3546c5a4369d35186_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-configmap-reloader@sha256:31938e349d61db5146e6387b05f5af2bd8f3aa822f93d2d3546c5a4369d35186_amd64, * |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:702706ac38dfdd0baacaa858d40e0bb58e0c612fa58167a998f55882e7d9538c_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-cluster-autoscaler-operator@sha256:702706ac38dfdd0baacaa858d40e0bb58e0c612fa58167a998f55882e7d9538c_amd64 |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:8dcda0b330bb56e505e096169860d32081f85735aa241daba41b56f9b54032a4_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-cluster-bootstrap@sha256:8dcda0b330bb56e505e096169860d32081f85735aa241daba41b56f9b54032a4_amd64 |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:a214477ad7e55c68226dec45a6c7d7e621d9df790151db98f7607ceb1a33e801_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-cluster-machine-approver@sha256:a214477ad7e55c68226dec45a6c7d7e621d9df790151db98f7607ceb1a33e801_amd64, * |
| Red Hat | openshift4/ose-docker-builder@sha256:5b4d7ccfae31e068acba8065848d9c4ff206c0b4cf25e7792946a8752565a417_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-docker-builder@sha256:5b4d7ccfae31e068acba8065848d9c4ff206c0b4cf25e7792946a8752565a417_amd64 |
| Red Hat | openshift4/ose-haproxy-router@sha256:87c6ad4e9b3111fcd96eaba4857ab3bbed53d8cfda37c86be76ad61e2db4d5f2_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-haproxy-router@sha256:87c6ad4e9b3111fcd96eaba4857ab3bbed53d8cfda37c86be76ad61e2db4d5f2_amd64 |
| Red Hat | openshift4/ose-openstack-machine-controllers@sha256:9552704d9b1994f399dd709b34b953ea99665cddebc5e8e99cea8b459f6534ed_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, * |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:b76f8f4582d98133993414af5208d0a271f635542f7c553f1f3b49404d3efbb5_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-cluster-kube-controller-manager-operator@sha256:b76f8f4582d98133993414af5208d0a271f635542f7c553f1f3b49404d3efbb5_amd64, * |
| Red Hat | openshift4/ose-multus-cni@sha256:7ca9f9543092ee337bc2d7461451a18d707f78b89d1ca924cee9ba5e7f9dc75f_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | openshift4/ose-multus-cni@sha256:7ca9f9543092ee337bc2d7461451a18d707f78b89d1ca924cee9ba5e7f9dc75f_amd64, * |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:6ed57940ac48d1e8ee12c28dc01132cc2c7c4926954096bcb7abc24776c24398_amd64 as a component of Red Hat OpenShift Container Platform 4.3 | *, openshift4/ose-prom-label-proxy@sha256:6ed57940ac48d1e8ee12c28dc01132cc2c7c4926954096bcb7abc24776c24398_amd64 |
…and 61 more
Timeline
- Jan 23, 2020 CVE Published
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
- May 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2020:0062 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1540560 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1542325 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1619479 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1665368 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1665828 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1674407 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1683057 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1684079 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1685189 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1685338 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1688613 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1690588 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1691190 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1692227 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1693169 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1698829 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1701495 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1704961 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1706103 issue
…and 792 more