RHSA-2021%3A0568 — Vulnetix

RHSA-2021%3A0568 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Red Hat	openshift4/file-integrity-rhel8-operator@sha256:794c8724df99f738e7cb4b28ad519e9547b3b8c990653ebb3a2555bed2d5b55b_amd64 as a component of Red Hat OpenShift Container Platform 4.6	openshift4/file-integrity-rhel8-operator@sha256:794c8724df99f738e7cb4b28ad519e9547b3b8c990653ebb3a2555bed2d5b55b_amd64
Red Hat	openshift4/file-integrity-rhel8-operator-metadata@sha256:4458d17f1402bd59b0e12ca6d737f051128427713da6292481d974ead388cc8a_amd64 as a component of Red Hat OpenShift Container Platform 4.6	openshift4/file-integrity-rhel8-operator-metadata@sha256:4458d17f1402bd59b0e12ca6d737f051128427713da6292481d974ead388cc8a_amd64

Timeline

Feb 16, 2021 CVE Published
Apr 30, 2026 CVE Updated
May 1, 2026 Distribution Patch
May 1, 2026 Distribution Patch
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory

References

Open in Interactive Console →