VDB
RHSA-2021%3A2374
RHSA-2021%3A2374
PUBLISHED
CVSS 8.600000381469727 HIGH
A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x as a component of OpenShift Logging 5.0 | openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64 |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64 as a component of OpenShift Logging 5.0 | * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x as a component of OpenShift Logging 5.0 | openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x as a component of OpenShift Logging 5.0 | openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x as a component of OpenShift Logging 5.0 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x as a component of OpenShift Logging 5.0 | openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x as a component of OpenShift Logging 5.0 | openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64 as a component of OpenShift Logging 5.0 | openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64 |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le as a component of OpenShift Logging 5.0 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le as a component of OpenShift Logging 5.0 | openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le |
…and 6 more
Timeline
- Jun 14, 2021 CVE Published
- Mar 26, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:2374 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1921650 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2374.json advisory
- https://access.redhat.com/security/cve/CVE-2021-3121 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-3121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-3121 advisory