VDB
RHSA-2021%3A0039
RHSA-2021%3A0039
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:109897f1477f3304a8c6f68c8cd25e13ad19ed2563d5bb379f539c88b3b6d7f0_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-dp-admission-controller@sha256:109897f1477f3304a8c6f68c8cd25e13ad19ed2563d5bb379f539c88b3b6d7f0_amd64 |
| Red Hat | openshift4/ose-elasticsearch-proxy@sha256:be984f65f63ba21e5a90320f722a951ccb70bce5bfc4d7f05790c079ac8c0c4f_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-elasticsearch-proxy@sha256:be984f65f63ba21e5a90320f722a951ccb70bce5bfc4d7f05790c079ac8c0c4f_amd64 |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:df1e2ae8d0ec45a7fd35b7761e0cf20b04a1194f425e91217cbe2f758ba8ef41_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:df1e2ae8d0ec45a7fd35b7761e0cf20b04a1194f425e91217cbe2f758ba8ef41_s390x |
| Red Hat | openshift4/ose-ptp-operator@sha256:7d2179a1dc8013d75fed9bd5cedd1b56f49aac1c089c64d5350783e74a59be73_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-ptp-operator@sha256:7d2179a1dc8013d75fed9bd5cedd1b56f49aac1c089c64d5350783e74a59be73_ppc64le |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:37a1f95fa6281f860523b3e8b64e658fec7219711af43fe81cb78d10a3011052_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-network-operator@sha256:37a1f95fa6281f860523b3e8b64e658fec7219711af43fe81cb78d10a3011052_amd64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:71c63062277634fccc38f65dfd3e023f7985c13efc6a884ac22eb342da102b69_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:71c63062277634fccc38f65dfd3e023f7985c13efc6a884ac22eb342da102b69_amd64 |
| Red Hat | openshift4/ose-egress-router@sha256:8b3d1b7b46bfab5358a5bf7f6b9b04ba2901c51e658439fbf0e3af7078066923_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-egress-router@sha256:8b3d1b7b46bfab5358a5bf7f6b9b04ba2901c51e658439fbf0e3af7078066923_ppc64le |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:70ad7f2d58e181a5f50eb982a51fe440ba4928be672ee8e12e2f7d981abb058e_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:70ad7f2d58e181a5f50eb982a51fe440ba4928be672ee8e12e2f7d981abb058e_amd64 |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:d9f58a6526abbf8322a2d579241a5fa166eee10bb048b406a86c0513a881f0cc_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:642a619779c953d7f17a79d135b6ecec8aea05e361662fbeba8ce473c7ec823f_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-egress-dns-proxy@sha256:642a619779c953d7f17a79d135b6ecec8aea05e361662fbeba8ce473c7ec823f_ppc64le |
| Red Hat | openshift4/ose-ghostunnel@sha256:901357dd050b6db56dc6172ef4e9c772b3a4eb3213bf5c3e1ead038f903256f3_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-ghostunnel@sha256:901357dd050b6db56dc6172ef4e9c772b3a4eb3213bf5c3e1ead038f903256f3_amd64 |
| Red Hat | openshift4/ose-sriov-operator-must-gather@sha256:e0e00d497f38f19908ed2433cc51976ff76bec30c8ed58d6ef517d17894b65a8_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-operator-must-gather@sha256:e0e00d497f38f19908ed2433cc51976ff76bec30c8ed58d6ef517d17894b65a8_s390x |
| Red Hat | openshift4/ose-descheduler@sha256:4af6515b49339f035a05f2d30a60f06ffce40e62885166bf1c9a3323c0a18168_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-descheduler@sha256:4af6515b49339f035a05f2d30a60f06ffce40e62885166bf1c9a3323c0a18168_s390x |
| Red Hat | openshift4/ose-service-idler-rhel8@sha256:329cf4cc68c00549c182572f1a63edfd2d7f17f062d0914618e4f2d9d1302018_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-service-idler-rhel8@sha256:329cf4cc68c00549c182572f1a63edfd2d7f17f062d0914618e4f2d9d1302018_amd64 |
| Red Hat | openshift4/ose-ptp-operator@sha256:3c44bf67385f039d5087abb01963e2219d36e7af6570e6298a3c49940ee6cb73_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-ptp-operator@sha256:3c44bf67385f039d5087abb01963e2219d36e7af6570e6298a3c49940ee6cb73_amd64 |
| Red Hat | openshift4/ose-sriov-network-config-daemon@sha256:21057357a0b4b3eeeb728af1cf1960c4e9a6a325a6674b28164ba6f8e131c469_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-network-config-daemon@sha256:21057357a0b4b3eeeb728af1cf1960c4e9a6a325a6674b28164ba6f8e131c469_s390x |
| Red Hat | openshift4/ose-service-idler-rhel8@sha256:6796552f31a07d4e92f91487c3225482b414c4c8cbc4190fa08a529f8164c751_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-service-idler-rhel8@sha256:6796552f31a07d4e92f91487c3225482b414c4c8cbc4190fa08a529f8164c751_ppc64le |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:eb8540346c12c82624131bf6f4a2340d34b96b11933f14caef568d46e43d55c7_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:eb8540346c12c82624131bf6f4a2340d34b96b11933f14caef568d46e43d55c7_ppc64le |
| Red Hat | openshift4/ose-descheduler@sha256:37f95c6b9e83c9a80984aefc96036b2207a0f44ca64f68de2ce7cd6c644c5836_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-descheduler@sha256:37f95c6b9e83c9a80984aefc96036b2207a0f44ca64f68de2ce7cd6c644c5836_amd64 |
| Red Hat | openshift4/ose-egress-router@sha256:1bbbee6cdfcfdfafa60dc09aadf65974acdad8856487f9bb97ebb7bf90131c37_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-egress-router@sha256:1bbbee6cdfcfdfafa60dc09aadf65974acdad8856487f9bb97ebb7bf90131c37_amd64 |
…and 85 more
Timeline
- Jan 18, 2021 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:0039 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1888393 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1890801 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1892794 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1897635 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1901299 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1907519 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1909614 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1909616 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1913104 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0039.json advisory
- https://access.redhat.com/security/cve/CVE-2020-28362 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-28362 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-28362 advisory