VDB
RHBA-2021%3A1167
RHBA-2021%3A1167
PUBLISHED
CVSS 6.5 MEDIUM
A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/kibana6-rhel8@sha256:b55210c1afb9e99290b7b7698fcbf9fdcc4c27796190d31383b493021487f386_ppc64le as a component of OpenShift Logging 5.0 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:e474c06731d1c95f7e4714df657e2648cbff4ed286667d5a657021943afd1923_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/logging-curator5-rhel8@sha256:e474c06731d1c95f7e4714df657e2648cbff4ed286667d5a657021943afd1923_amd64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:05fe03d9f4d30ae55411928a72c966edc57c11fdd86e4a98ecf3254cdc901d25_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/kibana6-rhel8@sha256:05fe03d9f4d30ae55411928a72c966edc57c11fdd86e4a98ecf3254cdc901d25_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:0bf5ed3adb2242d7f882fcc859d00549758eb73f763bde2548e40c4a61c01393_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/cluster-logging-rhel8-operator@sha256:0bf5ed3adb2242d7f882fcc859d00549758eb73f763bde2548e40c4a61c01393_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:c8bc967fbd8621d7cfce100381f13b3dd0c9705a5ce458ed0da52c01eb415a79_s390x as a component of OpenShift Logging 5.0 | openshift-logging/eventrouter-rhel8@sha256:c8bc967fbd8621d7cfce100381f13b3dd0c9705a5ce458ed0da52c01eb415a79_s390x |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:888e296061fe357f86a71d18e82801df6f82361979db503c8c544c9e4454d81e_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-rhel8-operator@sha256:888e296061fe357f86a71d18e82801df6f82361979db503c8c544c9e4454d81e_ppc64le |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:e0df89e664c10196955cc82120756511c82e547372b718ef31a6e8a70c6169e2_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-operator-bundle@sha256:e0df89e664c10196955cc82120756511c82e547372b718ef31a6e8a70c6169e2_amd64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:4439b313be0b9beac90f24dd0e559cfe108be09ae54ff73df0197a9629f79bb5_s390x as a component of OpenShift Logging 5.0 | openshift-logging/fluentd-rhel8@sha256:4439b313be0b9beac90f24dd0e559cfe108be09ae54ff73df0197a9629f79bb5_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:69715d874ec82e0b90d7b97494f8b6e5ae000d7af2047681efcdc318ffd1c6c6_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch6-rhel8@sha256:69715d874ec82e0b90d7b97494f8b6e5ae000d7af2047681efcdc318ffd1c6c6_ppc64le |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:c6d6295e2aaef2740c01dcb17804136f2fe52e47d4b87296538b470216439da2_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/eventrouter-rhel8@sha256:c6d6295e2aaef2740c01dcb17804136f2fe52e47d4b87296538b470216439da2_ppc64le |
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:4b4800ece109c0e6ff42f36e9a82efa26cc5a2d31b1f42d4e575b225af0acd39_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/cluster-logging-operator-bundle@sha256:4b4800ece109c0e6ff42f36e9a82efa26cc5a2d31b1f42d4e575b225af0acd39_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:5fd6d0d4818fcf7b3c25f2824ab0f6cbfcedd369227f8cfeb5badd0b7b793454_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-proxy-rhel8@sha256:5fd6d0d4818fcf7b3c25f2824ab0f6cbfcedd369227f8cfeb5badd0b7b793454_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:145aa96781b7d5bcab88b19f5e6a7fed29cb849d635274d3382aaf44bc2f19ff_s390x as a component of OpenShift Logging 5.0 | openshift-logging/logging-curator5-rhel8@sha256:145aa96781b7d5bcab88b19f5e6a7fed29cb849d635274d3382aaf44bc2f19ff_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:b26cfa1740b7ff75c480221502a5f23ddfe0aef1467553656b7c243bfc907120_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/fluentd-rhel8@sha256:b26cfa1740b7ff75c480221502a5f23ddfe0aef1467553656b7c243bfc907120_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:32cf64ae4e88893edd997887fec8c2868cc51d85e8cb85b834151b5f2ef9b766_s390x as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-proxy-rhel8@sha256:32cf64ae4e88893edd997887fec8c2868cc51d85e8cb85b834151b5f2ef9b766_s390x |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:09343df9e6b49e7777b5ca465a2cebd8b0c51f26c8f3df3737241c2a47c63efc_s390x as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-rhel8-operator@sha256:09343df9e6b49e7777b5ca465a2cebd8b0c51f26c8f3df3737241c2a47c63efc_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:216282b981e548dac17afcc4dbbc6e17d13f89712b0cdc440e78f3216f6aebe7_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch6-rhel8@sha256:216282b981e548dac17afcc4dbbc6e17d13f89712b0cdc440e78f3216f6aebe7_amd64 |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:53260729391a6c184597af83d67a91bb21a2b0fe0b699f29a1d55903d8218de0_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-rhel8-operator@sha256:53260729391a6c184597af83d67a91bb21a2b0fe0b699f29a1d55903d8218de0_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:40dcb2aae45ba1d9330dbf0dd8a1b30792905a74bd6306dd13a3f7e7e39817d4_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/eventrouter-rhel8@sha256:40dcb2aae45ba1d9330dbf0dd8a1b30792905a74bd6306dd13a3f7e7e39817d4_amd64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:a55f816432310930c6b587091e65b7002f6ec98072e5639a39cadf904c621902_s390x as a component of OpenShift Logging 5.0 | * |
…and 6 more
Timeline
- Apr 12, 2021 CVE Published
- Mar 19, 2026 CVE Updated
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHBA-2021:1167 advisory
- https://issues.redhat.com/browse/LOG-1187 advisory
- https://issues.redhat.com/browse/LOG-1216 advisory
- https://issues.redhat.com/browse/LOG-1218 advisory
- https://issues.redhat.com/browse/LOG-1254 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1167.json advisory
- https://access.redhat.com/security/cve/CVE-2021-3114 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1918750 issue
- https://www.cve.org/CVERecord?id=CVE-2021-3114 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-3114 advisory
- https://groups.google.com/g/golang-announce/c/mperVMGa98w advisory