VDB
RHSA-2021%3A1005
RHSA-2021%3A1005
PUBLISHED
CVSS 8.600000381469727 HIGH
A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:c1a7817206ea8535face584544ae7d31a61831697f52e46d3f226f8a4efc25e4_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-kube-proxy@sha256:f089acdb7343dbfc9dff30d6cc6ee96aa728f9f56f28dfa89bca95fa32758bfc_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-kube-proxy@sha256:f089acdb7343dbfc9dff30d6cc6ee96aa728f9f56f28dfa89bca95fa32758bfc_s390x |
| Red Hat | openshift4/ose-container-networking-plugins-rhel8@sha256:7e2b30b081dadfc58ce06f8b8b1c1424c1ba7fa10b7940aaf3442025a3ace5e8_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:c65ccf4319ec6788915f0c0c75d82f978ffe75fa1f75aa5dd5932d0c3c7caa35_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-csi-external-attacher@sha256:c65ccf4319ec6788915f0c0c75d82f978ffe75fa1f75aa5dd5932d0c3c7caa35_amd64 |
| Red Hat | openshift4/ose-csi-external-snapshotter@sha256:220ddb30465545b30fbdb8e4e821d79d542291c8ad91be6e3c66ee260f9edf39_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-csi-external-snapshotter@sha256:220ddb30465545b30fbdb8e4e821d79d542291c8ad91be6e3c66ee260f9edf39_amd64 |
| Red Hat | openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:fa0a7c538ffa0b3ffb43293cfe8f9ab93532c2f2337090dd424a9fa59cc729a7_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:fa0a7c538ffa0b3ffb43293cfe8f9ab93532c2f2337090dd424a9fa59cc729a7_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:02b016a492536025e4f06bece34587f3d20c38576e3252e8d1d00a0acb7cb8a6_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-kube-scheduler-operator@sha256:02b016a492536025e4f06bece34587f3d20c38576e3252e8d1d00a0acb7cb8a6_s390x |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:f310f5ec46f0d8b5cba61c3b9c51dd1dce55d1f31df721ad1484c819aed4e6db_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-thanos-rhel8@sha256:f310f5ec46f0d8b5cba61c3b9c51dd1dce55d1f31df721ad1484c819aed4e6db_ppc64le |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:9453ecc379e2dc19131778d30dce005f1c3b344f2590b7ef15c09cdc17337141_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-csi-external-attacher@sha256:9453ecc379e2dc19131778d30dce005f1c3b344f2590b7ef15c09cdc17337141_ppc64le |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:207171e956cadc45f80075d49eeb2ee934eef0d1344eeb5e5c08ac8653921983_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:207171e956cadc45f80075d49eeb2ee934eef0d1344eeb5e5c08ac8653921983_ppc64le |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel8@sha256:7bec7f9b51f4f450f1f49367bc13146563d82cd06a04833f80868d88d7324768_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-multus-route-override-cni-rhel8@sha256:7bec7f9b51f4f450f1f49367bc13146563d82cd06a04833f80868d88d7324768_s390x |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:c60101aa3461fdcbeaee53b58f6e1143b887b7eae20d0503426e45506dfd72e0_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:c60101aa3461fdcbeaee53b58f6e1143b887b7eae20d0503426e45506dfd72e0_amd64 |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:bfe9a85ecc6aff1ae5b7d00e2d57b583fb2a3ee98533d50732de1effee9eba29_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-machine-approver@sha256:bfe9a85ecc6aff1ae5b7d00e2d57b583fb2a3ee98533d50732de1effee9eba29_s390x |
| Red Hat | openshift4/ose-ironic-ipa-downloader-rhel8@sha256:9bb929e77311c1491e10ee91c96044906392b8bd289fe5f139ef5d0424485631_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-ironic-ipa-downloader-rhel8@sha256:9bb929e77311c1491e10ee91c96044906392b8bd289fe5f139ef5d0424485631_amd64 |
| Red Hat | openshift4/ose-grafana@sha256:d5cf14d1939d2a53e4f59f10b0c1b933ca89b04a886344d31cdb5d81b00c1334_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-grafana@sha256:d5cf14d1939d2a53e4f59f10b0c1b933ca89b04a886344d31cdb5d81b00c1334_amd64 |
| Red Hat | openshift4/ose-console-operator@sha256:f63cfa6a3e4e9e7f82744dbba1d25a9111479dc7d10415c8917d07123e9ca5d6_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-console-operator@sha256:f63cfa6a3e4e9e7f82744dbba1d25a9111479dc7d10415c8917d07123e9ca5d6_s390x |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:7c55dfa21c3317dd30594ed9ab04e0bcd294e7ef33f622190100eeae8a818fd1_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-k8s-prometheus-adapter@sha256:7c55dfa21c3317dd30594ed9ab04e0bcd294e7ef33f622190100eeae8a818fd1_s390x |
| Red Hat | openshift4/ose-cluster-openshift-apiserver-operator@sha256:de730642c5b6229b9775d577f538f67c4902320d9b9cfef345b8ef000875a64a_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-openshift-apiserver-operator@sha256:de730642c5b6229b9775d577f538f67c4902320d9b9cfef345b8ef000875a64a_amd64 |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel8@sha256:bea57cd9e772bcc89176f5dfbe09fe05aba600594aaa25d89f945c5af63b4898_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-kube-state-metrics@sha256:5b0bd7ef42d4a072fb9c86c479316cfdc14ca901a3e8c613b00d1fb021d4d5e6_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-kube-state-metrics@sha256:5b0bd7ef42d4a072fb9c86c479316cfdc14ca901a3e8c613b00d1fb021d4d5e6_ppc64le |
…and 758 more
Timeline
- Apr 5, 2021 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2021:1005 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1917904 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1919391 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1921650 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1925792 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1927198 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1927311 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1927953 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1928151 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1928614 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1929118 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1929246 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1929674 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1931382 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1931520 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1931622 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1931856 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1932268 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1932272 issue
…and 42 more