VDB
RHSA-2021%3A4766
RHSA-2021%3A4766
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A race condition flaw was found in Go. The incoming requests body weren't closed after the handler panic and as a consequence this could lead to ReverseProxy crash. The highest threat from this vulnerability is to Availability.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-serverless-1/serverless-rhel8-operator@sha256:ce22208bec16469664c738741d9cdfa229673a15b79db9b4469597a585a42a00_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serverless-rhel8-operator@sha256:ce22208bec16469664c738741d9cdfa229673a15b79db9b4469597a585a42a00_s390x |
| Red Hat | openshift-serverless-1/eventing-controller-rhel8@sha256:de7cc2b8385c87ded67bba003045957475f30ebc9f5ebc5762b702ca7a532b03_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-controller-rhel8@sha256:de7cc2b8385c87ded67bba003045957475f30ebc9f5ebc5762b702ca7a532b03_s390x |
| Red Hat | openshift-serverless-1/serving-activator-rhel8@sha256:e0da6abfebb799a8aee871d493a1fe9b6aa3df659dea13fb8ff11b712bf10202_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-activator-rhel8@sha256:e0da6abfebb799a8aee871d493a1fe9b6aa3df659dea13fb8ff11b712bf10202_s390x, openshift-serverless-1/serving-activator-rhel8@sha256:e0da6abfebb799a8aee871d493a1fe9b6aa3df659dea13fb8ff11b712bf10202_s390x |
| Red Hat | openshift-serverless-1/ingress-rhel8-operator@sha256:9814ff193492a9904cd84d2987a60ac2f10d6577e98c719f638aff577a993bd0_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/ingress-rhel8-operator@sha256:9814ff193492a9904cd84d2987a60ac2f10d6577e98c719f638aff577a993bd0_amd64, openshift-serverless-1/ingress-rhel8-operator@sha256:9814ff193492a9904cd84d2987a60ac2f10d6577e98c719f638aff577a993bd0_amd64 |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:f6cc90833f798f3a5a7388f84a82a877152174ec5b16d2f5fe507a6224f74df6_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:f6cc90833f798f3a5a7388f84a82a877152174ec5b16d2f5fe507a6224f74df6_s390x, openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:f6cc90833f798f3a5a7388f84a82a877152174ec5b16d2f5fe507a6224f74df6_s390x |
| Red Hat | openshift-serverless-1/client-kn-rhel8@sha256:b1add3d43f3af0e6244f917d7181c1b9a057e680107d609ca5f5f560dada9bdb_ppc64le as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/client-kn-rhel8@sha256:b1add3d43f3af0e6244f917d7181c1b9a057e680107d609ca5f5f560dada9bdb_ppc64le |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:022d6e58373d02a5c5db6411472c3f9549ad3dd22f9fb0ac2bc9f9c761b9a14f_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:022d6e58373d02a5c5db6411472c3f9549ad3dd22f9fb0ac2bc9f9c761b9a14f_amd64 |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:f6cc90833f798f3a5a7388f84a82a877152174ec5b16d2f5fe507a6224f74df6_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:f6cc90833f798f3a5a7388f84a82a877152174ec5b16d2f5fe507a6224f74df6_s390x |
| Red Hat | openshift-serverless-1/eventing-controller-rhel8@sha256:a2b521761cd5456f5c4e0ea631af1c0aff9cb63bc872e7cc508a15d5c0fb054b_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-controller-rhel8@sha256:a2b521761cd5456f5c4e0ea631af1c0aff9cb63bc872e7cc508a15d5c0fb054b_amd64, openshift-serverless-1/eventing-controller-rhel8@sha256:a2b521761cd5456f5c4e0ea631af1c0aff9cb63bc872e7cc508a15d5c0fb054b_amd64 |
| Red Hat | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:a721544740837da84a04cafe839b9ccb3c52851b99bd5e8ecf378ab5d6eb2a85_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:a721544740837da84a04cafe839b9ccb3c52851b99bd5e8ecf378ab5d6eb2a85_amd64 |
| Red Hat | openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:162df2b7127f2401dc23545f6ad4f363833f0d0865bbfc40d4244bd191921c31_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:162df2b7127f2401dc23545f6ad4f363833f0d0865bbfc40d4244bd191921c31_amd64, * |
| Red Hat | openshift-serverless-1/serving-queue-rhel8@sha256:655bd0885197a76aa34074d6c1836b3ce8ad169a0b0082cda827f46c8fe3e2e6_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-queue-rhel8@sha256:655bd0885197a76aa34074d6c1836b3ce8ad169a0b0082cda827f46c8fe3e2e6_s390x, openshift-serverless-1/serving-queue-rhel8@sha256:655bd0885197a76aa34074d6c1836b3ce8ad169a0b0082cda827f46c8fe3e2e6_s390x |
| Red Hat | openshift-serverless-1/serving-controller-rhel8@sha256:826d2588cd50e1fa5931dc7a860eb845f5574b3c757593a775399fd78cd3079b_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-controller-rhel8@sha256:826d2588cd50e1fa5931dc7a860eb845f5574b3c757593a775399fd78cd3079b_s390x, openshift-serverless-1/serving-controller-rhel8@sha256:826d2588cd50e1fa5931dc7a860eb845f5574b3c757593a775399fd78cd3079b_s390x |
| Red Hat | openshift-serverless-1/serving-webhook-rhel8@sha256:02cabd4fffd5e9c38e18b08bb81a5015da6e8ef9df270eb3e99590f37133e201_ppc64le as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-webhook-rhel8@sha256:02cabd4fffd5e9c38e18b08bb81a5015da6e8ef9df270eb3e99590f37133e201_ppc64le, openshift-serverless-1/serving-webhook-rhel8@sha256:02cabd4fffd5e9c38e18b08bb81a5015da6e8ef9df270eb3e99590f37133e201_ppc64le |
| Red Hat | openshift-serverless-1/serving-activator-rhel8@sha256:de971b819ee2851325a61ac6dfae927f72bc3a701bd3eb54d915df487604ca82_ppc64le as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-activator-rhel8@sha256:de971b819ee2851325a61ac6dfae927f72bc3a701bd3eb54d915df487604ca82_ppc64le |
| Red Hat | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:0307315d77d547fba1af313eb250baef68b34f3554fe91e493a3ebf92c8d1d36_s390x as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:0307315d77d547fba1af313eb250baef68b34f3554fe91e493a3ebf92c8d1d36_s390x |
| Red Hat | openshift-serverless-1/net-istio-controller-rhel8@sha256:169372ee329ee696cc1caa42a784c1b93512dae4b8fa4aefa4b8101876efcba7_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/net-istio-controller-rhel8@sha256:169372ee329ee696cc1caa42a784c1b93512dae4b8fa4aefa4b8101876efcba7_amd64 |
| Red Hat | openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:da2fe42f6469c05b290aa0cae7b11f1c40036f31a7a8f5b1654c1450023efc4b_amd64 as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:da2fe42f6469c05b290aa0cae7b11f1c40036f31a7a8f5b1654c1450023efc4b_amd64 |
| Red Hat | openshift-serverless-1/serving-webhook-rhel8@sha256:02cabd4fffd5e9c38e18b08bb81a5015da6e8ef9df270eb3e99590f37133e201_ppc64le as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-webhook-rhel8@sha256:02cabd4fffd5e9c38e18b08bb81a5015da6e8ef9df270eb3e99590f37133e201_ppc64le |
| Red Hat | openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:a881b18751f593ec40ff116a1ea9fb939c5d8efc3bcd09dbef91d6e9f3a71e36_ppc64le as a component of Red Hat OpenShift Serverless 1.19 | openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:a881b18751f593ec40ff116a1ea9fb939c5d8efc3bcd09dbef91d6e9f3a71e36_ppc64le, openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:a881b18751f593ec40ff116a1ea9fb939c5d8efc3bcd09dbef91d6e9f3a71e36_ppc64le |
…and 156 more
Timeline
- Nov 23, 2021 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2021:4766 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1995656 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2016256 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2016258 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4766.json advisory
- https://access.redhat.com/security/cve/CVE-2021-36221 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-36221 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-36221 advisory
- https://groups.google.com/g/golang-announce/c/uHACNfXAZqk advisory