VDB
RHBA-2021%3A3393
RHBA-2021%3A3393
PUBLISHED
CVSS 7.5 HIGH
A resource-consumption vulnerability was found in rubygem addressable, where its URI template implementation could allow an attacker's crafted template to consume resources, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:a484b5b99cad803ae3fb72a720e09096f52380a5443152b4531c69fac970473f_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/log-file-metric-exporter-rhel8@sha256:a484b5b99cad803ae3fb72a720e09096f52380a5443152b4531c69fac970473f_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:f0a264457205a99090348ba53c3db478ea1f0c7fd28159bb3b2b9adb284e9aa1_s390x as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch-rhel8-operator@sha256:f0a264457205a99090348ba53c3db478ea1f0c7fd28159bb3b2b9adb284e9aa1_s390x |
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:b86bf7654c7919887a004c3953840eed5d514bf0f08106ce043bc4c3dae37c83_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:09af2549ff71a9ffa19538ff53599713af715b9623f6f5114449d45232162c71_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/cluster-logging-rhel8-operator@sha256:09af2549ff71a9ffa19538ff53599713af715b9623f6f5114449d45232162c71_ppc64le |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:a9f2513d88f73a1e8791285e01fb8679887ee55428f25ac83eb296de09783aa1_s390x as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:a9f2513d88f73a1e8791285e01fb8679887ee55428f25ac83eb296de09783aa1_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:76f129f017634397a17657ac57e6aa0d54152d43fe520960fd953f382e2d7242_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:76f129f017634397a17657ac57e6aa0d54152d43fe520960fd953f382e2d7242_amd64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:bd8241504d7eba68b32af8b82be1129a4ac6a843f1015ed214e773a653af9393_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:95c8eb02898b1923e41e6abeeda9cf3fea77e6d736ad4846df9567400435f4f4_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch6-rhel8@sha256:95c8eb02898b1923e41e6abeeda9cf3fea77e6d736ad4846df9567400435f4f4_ppc64le |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:1db3ea077db0c2948210558883d85d04f94658aab02754eba5c3cdb49e42de29_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/kibana6-rhel8@sha256:1db3ea077db0c2948210558883d85d04f94658aab02754eba5c3cdb49e42de29_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:0c3372e846ce58fc9159ef61e80d625cd657a682f9e0dadd8a255194681e05fd_s390x as a component of OpenShift Logging 5.2 | openshift-logging/logging-curator5-rhel8@sha256:0c3372e846ce58fc9159ef61e80d625cd657a682f9e0dadd8a255194681e05fd_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:61e1d646090fe7832579e0cdb6c82750f42498354ed192935dd3e2c69cf88607_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:61e1d646090fe7832579e0cdb6c82750f42498354ed192935dd3e2c69cf88607_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:e7d91d273055029172d55ae4d39d76321d67dee8be7e3ee5fc29bcd5e82d1af0_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch-rhel8-operator@sha256:e7d91d273055029172d55ae4d39d76321d67dee8be7e3ee5fc29bcd5e82d1af0_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:9937504a2361c70f2ea9b10fae6ce5ff4096bc3c5f3d01b0cea7c041ff0cabcb_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/logging-curator5-rhel8@sha256:9937504a2361c70f2ea9b10fae6ce5ff4096bc3c5f3d01b0cea7c041ff0cabcb_amd64 |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:2a6c0dae3b3c96b0c669a30cb748caae05fb36927fb5143a861a50c0f5fc7577_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/logging-curator5-rhel8@sha256:2a6c0dae3b3c96b0c669a30cb748caae05fb36927fb5143a861a50c0f5fc7577_ppc64le |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:ce7dc68e2a3e32b58e231267ee3be305bc976fef670c7ddbcdc50ddfffbd209d_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/eventrouter-rhel8@sha256:ce7dc68e2a3e32b58e231267ee3be305bc976fef670c7ddbcdc50ddfffbd209d_amd64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:660f26a9af99e0d0d2b26d5f3c485692100f8fc81f91803448cd79cc36938dec_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:62bb4c55d5b033a2a27ee958c7aac2bd213072e3e35541aba817532b415b10d8_s390x as a component of OpenShift Logging 5.2 | openshift-logging/kibana6-rhel8@sha256:62bb4c55d5b033a2a27ee958c7aac2bd213072e3e35541aba817532b415b10d8_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:7730e3d1c2f0ad01f044b21dbb90f079c486f311026854695e816e164d4e1cb3_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch6-rhel8@sha256:7730e3d1c2f0ad01f044b21dbb90f079c486f311026854695e816e164d4e1cb3_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:b9bccd956a9fe22506696f4ff1a83410ebbeb48b8dad3c1ee5dbd9270e061e04_s390x as a component of OpenShift Logging 5.2 | openshift-logging/cluster-logging-rhel8-operator@sha256:b9bccd956a9fe22506696f4ff1a83410ebbeb48b8dad3c1ee5dbd9270e061e04_s390x |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:07394901f71213f2428c99a6a0e469ef9be97db4fd2ff41d3ec8fc3a862b2bfe_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch-proxy-rhel8@sha256:07394901f71213f2428c99a6a0e469ef9be97db4fd2ff41d3ec8fc3a862b2bfe_ppc64le |
…and 9 more
Timeline
- Sep 7, 2021 CVE Published
- Mar 21, 2026 CVE Updated
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHBA-2021:3393 advisory
- https://issues.redhat.com/browse/LOG-1071 advisory
- https://issues.redhat.com/browse/LOG-1130 advisory
- https://issues.redhat.com/browse/LOG-1271 advisory
- https://issues.redhat.com/browse/LOG-1273 advisory
- https://issues.redhat.com/browse/LOG-1276 advisory
- https://issues.redhat.com/browse/LOG-1353 advisory
- https://issues.redhat.com/browse/LOG-1385 advisory
- https://issues.redhat.com/browse/LOG-1411 advisory
- https://issues.redhat.com/browse/LOG-1420 advisory
- https://issues.redhat.com/browse/LOG-1440 advisory
- https://issues.redhat.com/browse/LOG-1446 advisory
- https://issues.redhat.com/browse/LOG-1499 advisory
- https://issues.redhat.com/browse/LOG-1558 advisory
- https://issues.redhat.com/browse/LOG-1567 advisory
- https://issues.redhat.com/browse/LOG-1570 advisory
- https://issues.redhat.com/browse/LOG-1589 advisory
- https://issues.redhat.com/browse/LOG-1590 advisory
- https://issues.redhat.com/browse/LOG-1623 advisory
- https://issues.redhat.com/browse/LOG-1624 advisory
…and 15 more