VDB

RHSA-2021%3A4627

RHSA-2021%3A4627 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. An attacker can craft an input to ParseFragment within parse.go that would cause it to enter an infinite loop and never return. The greatest threat to the system is of availability.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift-logging/kibana6-rhel8@sha256:90e95b67ad19c9725e6c48da5d3e0f8133d7d0a314d26d10f938dc1c57f665b6_ppc64le as a component of OpenShift Logging 5.3*, openshift-logging/kibana6-rhel8@sha256:90e95b67ad19c9725e6c48da5d3e0f8133d7d0a314d26d10f938dc1c57f665b6_ppc64le
Red Hatopenshift-logging/eventrouter-rhel8@sha256:68ba096240d2100ac422268828041a022614f168f4756c4dc92e672e4e1a5c24_amd64 as a component of OpenShift Logging 5.3openshift-logging/eventrouter-rhel8@sha256:68ba096240d2100ac422268828041a022614f168f4756c4dc92e672e4e1a5c24_amd64
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:52b446198cabebb843d3389f5ac7c445dc244d104464dd604371436595341851_amd64 as a component of OpenShift Logging 5.3openshift-logging/cluster-logging-rhel8-operator@sha256:52b446198cabebb843d3389f5ac7c445dc244d104464dd604371436595341851_amd64
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:3a0730bd7bebc53b00899c52851c2f8b7b8b69580077d78d5082724fc75cb5c0_s390x as a component of OpenShift Logging 5.3openshift-logging/elasticsearch-proxy-rhel8@sha256:3a0730bd7bebc53b00899c52851c2f8b7b8b69580077d78d5082724fc75cb5c0_s390x, *
Red Hatopenshift-logging/elasticsearch6-rhel8@sha256:0bee91bd941738259926aff0b487f0c0de84014c3e1140d2e4d65fe190214fe1_s390x as a component of OpenShift Logging 5.3openshift-logging/elasticsearch6-rhel8@sha256:0bee91bd941738259926aff0b487f0c0de84014c3e1140d2e4d65fe190214fe1_s390x
Red Hatopenshift-logging/elasticsearch-operator-bundle@sha256:2caddd7da03ee120f6716445ef849faa57757826d74143b12bb953290fef0933_amd64 as a component of OpenShift Logging 5.3openshift-logging/elasticsearch-operator-bundle@sha256:2caddd7da03ee120f6716445ef849faa57757826d74143b12bb953290fef0933_amd64, *
Red Hatopenshift-logging/kibana6-rhel8@sha256:d6eb862cdc8332aed78bb0e876c1fce7815d41c31519e2ec8e3348307cf87ef4_s390x as a component of OpenShift Logging 5.3openshift-logging/kibana6-rhel8@sha256:d6eb862cdc8332aed78bb0e876c1fce7815d41c31519e2ec8e3348307cf87ef4_s390x, *
Red Hatopenshift-logging/fluentd-rhel8@sha256:5103d73962109f640c01218728cfabb48e7e9c77446ca571a0a0a887741afab4_s390x as a component of OpenShift Logging 5.3*, *
Red Hatopenshift-logging/kibana6-rhel8@sha256:8a1b73889617f5613538d6a04dd09d7b2e67d911d1efa897deac7ca90c7f076c_amd64 as a component of OpenShift Logging 5.3*, *
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:90374d9017fad93df9799888f4f5c8af7d6dbefec5a3e8079557ae17be19030d_s390x as a component of OpenShift Logging 5.3openshift-logging/cluster-logging-rhel8-operator@sha256:90374d9017fad93df9799888f4f5c8af7d6dbefec5a3e8079557ae17be19030d_s390x
Red Hatopenshift-logging/fluentd-rhel8@sha256:0b8a4fcb7de64ecb88c7d579d9c068438be341fd26530b725800acda04991ab3_amd64 as a component of OpenShift Logging 5.3openshift-logging/fluentd-rhel8@sha256:0b8a4fcb7de64ecb88c7d579d9c068438be341fd26530b725800acda04991ab3_amd64
Red Hatopenshift-logging/logging-curator5-rhel8@sha256:1597687c75b7c671e1043124c2c5b483139de7eff388553545f19cfb593b1a3a_amd64 as a component of OpenShift Logging 5.3openshift-logging/logging-curator5-rhel8@sha256:1597687c75b7c671e1043124c2c5b483139de7eff388553545f19cfb593b1a3a_amd64
Red Hatopenshift-logging/elasticsearch6-rhel8@sha256:012aa4f6f263d64150b50a8ee2031032c4fbab3e6e8d7d17216259fa74e97ec5_amd64 as a component of OpenShift Logging 5.3openshift-logging/elasticsearch6-rhel8@sha256:012aa4f6f263d64150b50a8ee2031032c4fbab3e6e8d7d17216259fa74e97ec5_amd64, *
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:e0733842d440d5a6c7e57bc0f70c743e545d796bc1756cea48e1a24037f07b49_amd64 as a component of OpenShift Logging 5.3*, openshift-logging/elasticsearch-proxy-rhel8@sha256:e0733842d440d5a6c7e57bc0f70c743e545d796bc1756cea48e1a24037f07b49_amd64
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:71003965d73d308a80ca3c3b23906bde0613de3840233eb55826a1ccfa683c8a_amd64 as a component of OpenShift Logging 5.3*
Red Hatopenshift-logging/elasticsearch6-rhel8@sha256:0bee91bd941738259926aff0b487f0c0de84014c3e1140d2e4d65fe190214fe1_s390x as a component of OpenShift Logging 5.3*, openshift-logging/elasticsearch6-rhel8@sha256:0bee91bd941738259926aff0b487f0c0de84014c3e1140d2e4d65fe190214fe1_s390x
Red Hatopenshift-logging/eventrouter-rhel8@sha256:6b7614b921943a2332f2d6e911db7c9c4c3dbb91988b849bdcb892f966e412f6_ppc64le as a component of OpenShift Logging 5.3openshift-logging/eventrouter-rhel8@sha256:6b7614b921943a2332f2d6e911db7c9c4c3dbb91988b849bdcb892f966e412f6_ppc64le
Red Hatopenshift-logging/logging-curator5-rhel8@sha256:8116aff94708793be9fe9d0479d6350a02f9efa7857c0261ebe4c0d8ef6d7422_ppc64le as a component of OpenShift Logging 5.3*, openshift-logging/logging-curator5-rhel8@sha256:8116aff94708793be9fe9d0479d6350a02f9efa7857c0261ebe4c0d8ef6d7422_ppc64le
Red Hatopenshift-logging/elasticsearch-rhel8-operator@sha256:6d6ba1903a08f13b718ac33114fa064b8c91e3c995fce3fcb6ea8ac31ef96281_s390x as a component of OpenShift Logging 5.3openshift-logging/elasticsearch-rhel8-operator@sha256:6d6ba1903a08f13b718ac33114fa064b8c91e3c995fce3fcb6ea8ac31ef96281_s390x
Red Hatopenshift-logging/elasticsearch-rhel8-operator@sha256:6149e72c8c94910c8ad438e477186caf0b85730ffbf6c3f5277027d963804e50_ppc64le as a component of OpenShift Logging 5.3openshift-logging/elasticsearch-rhel8-operator@sha256:6149e72c8c94910c8ad438e477186caf0b85730ffbf6c3f5277027d963804e50_ppc64le, *

…and 40 more

Timeline

  • Nov 15, 2021 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 12, 2026 CVE Updated

References

…and 6 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›