VDB
RHSA-2021%3A3361
RHSA-2021%3A3361
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integrity.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:3ed94a3661d0cdcf06921fd552c044f8e02d640d5fbeb240ebcd0068d7c07873_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-log-reader-rhel8@sha256:3ed94a3661d0cdcf06921fd552c044f8e02d640d5fbeb240ebcd0068d7c07873_amd64, rhmtc/openshift-migration-log-reader-rhel8@sha256:3ed94a3661d0cdcf06921fd552c044f8e02d640d5fbeb240ebcd0068d7c07873_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:1e26af4b60c8876a6557bb015b89e0770b453d8a363c2af2f6432f1ad9758463_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:1e26af4b60c8876a6557bb015b89e0770b453d8a363c2af2f6432f1ad9758463_amd64, * |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64, rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:6731c74dd154dcb40ace9d4876b77dc2610bcc717898be03ea33ad85a5078256_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-controller-rhel8@sha256:6731c74dd154dcb40ace9d4876b77dc2610bcc717898be03ea33ad85a5078256_amd64, * |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64, rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64 as a component of 7Server-RHMTC-1.5 | rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:b98147918ef12962891c490a3050cd5851efb010481666c62916684126f36826_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-registry-rhel8@sha256:b98147918ef12962891c490a3050cd5851efb010481666c62916684126f36826_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:b98147918ef12962891c490a3050cd5851efb010481666c62916684126f36826_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64, rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64 |
| Red Hat | rhmtc/openshift-velero-plugin-rhel8@sha256:0ff51536432d4925bf43e19bca1141391d48d26c4bf4227f6131a0b1b3781ce1_amd64 as a component of 8Base-RHMTC-1.5 | *, rhmtc/openshift-velero-plugin-rhel8@sha256:0ff51536432d4925bf43e19bca1141391d48d26c4bf4227f6131a0b1b3781ce1_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64 as a component of 7Server-RHMTC-1.5 | rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64, rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64, rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:1e26af4b60c8876a6557bb015b89e0770b453d8a363c2af2f6432f1ad9758463_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:1e26af4b60c8876a6557bb015b89e0770b453d8a363c2af2f6432f1ad9758463_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64, rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:b53c5737296e969abcd39f3bf7a7b4731681c261c6232c96f2f0576a8ea2bb0f_amd64 as a component of 8Base-RHMTC-1.5 | *, * |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:b53c5737296e969abcd39f3bf7a7b4731681c261c6232c96f2f0576a8ea2bb0f_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:b53c5737296e969abcd39f3bf7a7b4731681c261c6232c96f2f0576a8ea2bb0f_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64 |
…and 8 more
Timeline
- Aug 31, 2021 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2021:3361 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1965503 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1983596 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989564 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989570 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1989575 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1996125 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3361.json advisory
- https://access.redhat.com/security/cve/CVE-2021-33195 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33195 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33195 advisory
- https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI advisory
- https://access.redhat.com/security/cve/CVE-2021-33196 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33196 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33196 advisory
- https://access.redhat.com/security/cve/CVE-2021-33197 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33197 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-33197 advisory
- https://access.redhat.com/security/cve/CVE-2021-33198 advisory
…and 7 more