VDB

RHSA-2021%3A0187

RHSA-2021%3A0187 PUBLISHED CVSS 7.5 HIGH

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker could use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:53fd0c287fd1f502059615daf22fac2cdc50a3dc819b6af7afb9b4c68a0fc3a5_amd64 as a component of CNV 2.5 for RHEL 8*
Red Hatcontainer-native-virtualization/vm-import-controller-rhel8@sha256:7b134cb7b06fde80c8acf0e84a24d5c2d07f180c936b7d580a16ddc72dc437fd_amd64 as a component of CNV 2.5 for RHEL 8container-native-virtualization/vm-import-controller-rhel8@sha256:7b134cb7b06fde80c8acf0e84a24d5c2d07f180c936b7d580a16ddc72dc437fd_amd64
Red Hatcontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:d8231c1d06d7275b826bdd791ee119d9775023a96563286e144e2c084b5540ca_amd64 as a component of CNV 2.5 for RHEL 8container-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:d8231c1d06d7275b826bdd791ee119d9775023a96563286e144e2c084b5540ca_amd64
Red Hatcontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:610b53c8005bc88a0ebdc5a97e9284e48005e1b939f6952e4c5d0738827529c8_amd64 as a component of CNV 2.5 for RHEL 8*

Timeline

  • Jan 19, 2021 CVE Published
  • Apr 30, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›