VDB
RHSA-2021%3A3229
RHSA-2021%3A3229
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integrity.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x |
| Red Hat | distributed-tracing/jaeger-rhel8-operator@sha256:2dc897bcc64f04d3b61eee46a1145f55c108384e91648621eb28c592e445e76e_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-rhel8-operator@sha256:2dc897bcc64f04d3b61eee46a1145f55c108384e91648621eb28c592e445e76e_s390x |
| Red Hat | distributed-tracing/jaeger-all-in-one-rhel8@sha256:2888fe791e253b0996905494a87fe22d0a1244c80bb5915da81598f7ba494fe2_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-all-in-one-rhel8@sha256:2888fe791e253b0996905494a87fe22d0a1244c80bb5915da81598f7ba494fe2_amd64 |
| Red Hat | distributed-tracing/jaeger-query-rhel8@sha256:9245616fdd3f13177fd380e9ead380d36920fe1f8ff818109beb5a08437d355f_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-query-rhel8@sha256:9245616fdd3f13177fd380e9ead380d36920fe1f8ff818109beb5a08437d355f_ppc64le, distributed-tracing/jaeger-query-rhel8@sha256:9245616fdd3f13177fd380e9ead380d36920fe1f8ff818109beb5a08437d355f_ppc64le |
| Red Hat | distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x, distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x |
| Red Hat | distributed-tracing/jaeger-ingester-rhel8@sha256:9a34b254114e0ce09732cff1958a99bd33d0bf2022011314ef44c09033df5c59_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | * |
| Red Hat | distributed-tracing/jaeger-ingester-rhel8@sha256:45a12e906eccb6181bbe7ec79df4cd26241a78d2dbf6ef554b5e54072ba015dc_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-ingester-rhel8@sha256:45a12e906eccb6181bbe7ec79df4cd26241a78d2dbf6ef554b5e54072ba015dc_amd64, distributed-tracing/jaeger-ingester-rhel8@sha256:45a12e906eccb6181bbe7ec79df4cd26241a78d2dbf6ef554b5e54072ba015dc_amd64 |
| Red Hat | distributed-tracing/jaeger-rhel8-operator@sha256:a169e3ef17190613e28ffbdaf852a4eaf539b1ca62679ac030d08eb629cfd136_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | * |
| Red Hat | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:1601e98d05a3c596c6b165281d2221b9979d5d07ca6c3a5314db70c97fe3b1ed_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:1601e98d05a3c596c6b165281d2221b9979d5d07ca6c3a5314db70c97fe3b1ed_s390x, distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:1601e98d05a3c596c6b165281d2221b9979d5d07ca6c3a5314db70c97fe3b1ed_s390x |
| Red Hat | distributed-tracing/jaeger-all-in-one-rhel8@sha256:15ae661e4fca96e541514553fc80a40adfbe9bc174d04be529879d333a52341a_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-all-in-one-rhel8@sha256:15ae661e4fca96e541514553fc80a40adfbe9bc174d04be529879d333a52341a_s390x, distributed-tracing/jaeger-all-in-one-rhel8@sha256:15ae661e4fca96e541514553fc80a40adfbe9bc174d04be529879d333a52341a_s390x |
| Red Hat | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:4f057e83926ddffd190344754ff7722c0593d59ec083f4a36edab3cc78066319_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | * |
| Red Hat | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:5fde9fd6a7006f09a286d9453b97f61fe8d8d9c52ce15c81951e6e7242af9d04_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:5fde9fd6a7006f09a286d9453b97f61fe8d8d9c52ce15c81951e6e7242af9d04_ppc64le |
| Red Hat | distributed-tracing/jaeger-ingester-rhel8@sha256:9a34b254114e0ce09732cff1958a99bd33d0bf2022011314ef44c09033df5c59_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-ingester-rhel8@sha256:9a34b254114e0ce09732cff1958a99bd33d0bf2022011314ef44c09033df5c59_ppc64le, distributed-tracing/jaeger-ingester-rhel8@sha256:9a34b254114e0ce09732cff1958a99bd33d0bf2022011314ef44c09033df5c59_ppc64le |
| Red Hat | distributed-tracing/jaeger-collector-rhel8@sha256:0c844f2c3806f4c45fa9ac2d33cf4feb211a65e4ebd0fe1faf40744633f7a88c_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | * |
| Red Hat | distributed-tracing/jaeger-all-in-one-rhel8@sha256:f3fb0f3c7dd9f9b54a9d8c865027133da58e583d44d548fbe70017aa75e15d05_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | * |
| Red Hat | distributed-tracing/jaeger-collector-rhel8@sha256:f4b09dab750c8771f7691dcd7ba67e67ec959db0015a9f2e16056ac4064ef60a_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-collector-rhel8@sha256:f4b09dab750c8771f7691dcd7ba67e67ec959db0015a9f2e16056ac4064ef60a_ppc64le |
| Red Hat | distributed-tracing/jaeger-es-rollover-rhel8@sha256:1e28d2b8c9690eae2e724cdf640340d1327f60d6b2f9498053d089489d3bc0d9_s390x as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-es-rollover-rhel8@sha256:1e28d2b8c9690eae2e724cdf640340d1327f60d6b2f9498053d089489d3bc0d9_s390x |
| Red Hat | distributed-tracing/jaeger-query-rhel8@sha256:91e546e6dc677b1c8f1f2c47c42317ad607adcfccf7ad9a697f50bb1d4566b19_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-query-rhel8@sha256:91e546e6dc677b1c8f1f2c47c42317ad607adcfccf7ad9a697f50bb1d4566b19_amd64, * |
| Red Hat | distributed-tracing/jaeger-es-rollover-rhel8@sha256:b3904f13916a5260bc05d336f475ea7d04cb27f94d036716406093dc9c4bc8de_ppc64le as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-es-rollover-rhel8@sha256:b3904f13916a5260bc05d336f475ea7d04cb27f94d036716406093dc9c4bc8de_ppc64le, * |
| Red Hat | distributed-tracing/jaeger-rhel8-operator@sha256:2dfdc0fc7dc477b8f84403bbc639751fe7ad37521458b0a110add25c6b50a81f_amd64 as a component of Red Hat OpenShift Jaeger 1.20 | distributed-tracing/jaeger-rhel8-operator@sha256:2dfdc0fc7dc477b8f84403bbc639751fe7ad37521458b0a110add25c6b50a81f_amd64 |
…and 28 more
Timeline
- Aug 19, 2021 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2021:3229 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1965503 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1983596 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989564 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989570 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989575 issue
- https://issues.redhat.com/browse/TRACING-2083 advisory
- https://issues.redhat.com/browse/TRACING-2087 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3229.json advisory
- https://access.redhat.com/security/cve/CVE-2021-33195 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33195 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33195 advisory
- https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI advisory
- https://access.redhat.com/security/cve/CVE-2021-33196 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33196 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33196 advisory
- https://access.redhat.com/security/cve/CVE-2021-33197 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33197 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33197 advisory
…and 8 more