VDB
RHSA-2021%3A5038
RHSA-2021%3A5038
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the semver-regex library where it could lead to consuming a big amount of resources when executing specific strings. Attackers could take advantage of this by crafting an invalid version causing a disruption or a denial of service (DoS).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/cert-policy-controller-rhel8@sha256:23be721ed428252b85c7db7a630cff0c93843399ee9046c39bc6e38be3eecf2a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/cert-policy-controller-rhel8@sha256:23be721ed428252b85c7db7a630cff0c93843399ee9046c39bc6e38be3eecf2a_s390x |
| Red Hat | rhacm2/work-rhel8@sha256:519c4c82fc4e3cf6b0ea97564ae2ccf768f5fb9b9cb2985b6d0f99b2f6a0dc11_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/work-rhel8@sha256:519c4c82fc4e3cf6b0ea97564ae2ccf768f5fb9b9cb2985b6d0f99b2f6a0dc11_amd64 |
| Red Hat | rhacm2/multicluster-observability-rhel8-operator@sha256:ea247c3948711f2680d824a6c16c1e8673be3f6d73e495254cfd78c1b5314b0e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multicluster-observability-rhel8-operator@sha256:ea247c3948711f2680d824a6c16c1e8673be3f6d73e495254cfd78c1b5314b0e_amd64 |
| Red Hat | rhacm2/submariner-addon-rhel8@sha256:6289dac2719d21fca58711f4ff9c9e675022e9ed7e930c45f85da4fb186caea3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/submariner-addon-rhel8@sha256:6289dac2719d21fca58711f4ff9c9e675022e9ed7e930c45f85da4fb186caea3_amd64 |
| Red Hat | rhacm2/multiclusterhub-rhel8@sha256:ded8d9d5d69a72cefed34f251cf6074e00de6d16e71abaf3f6c00d0d6ef92493_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multiclusterhub-rhel8@sha256:ded8d9d5d69a72cefed34f251cf6074e00de6d16e71abaf3f6c00d0d6ef92493_amd64 |
| Red Hat | rhacm2/acm-operator-bundle@sha256:45c62eebbe36d9bf431f0e74f00a9af7d610e74ec147931c7e62262dc3ca2c90_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/acm-operator-bundle@sha256:45c62eebbe36d9bf431f0e74f00a9af7d610e74ec147931c7e62262dc3ca2c90_amd64 |
| Red Hat | rhacm2/registration-rhel8-operator@sha256:0a59f9a3c0cc86f2cbc0d3b2137a2a6fa97ea415f393d54be2838e1404a3282f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/registration-rhel8-operator@sha256:0a59f9a3c0cc86f2cbc0d3b2137a2a6fa97ea415f393d54be2838e1404a3282f_s390x |
| Red Hat | rhacm2/management-ingress-rhel7@sha256:7ad7cb3c0db112ae9cb42b8fe9a1aa3a1db2fc896181a9aee0b9b07744482d24_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7 | rhacm2/management-ingress-rhel7@sha256:7ad7cb3c0db112ae9cb42b8fe9a1aa3a1db2fc896181a9aee0b9b07744482d24_amd64 |
| Red Hat | rhacm2/console-header-rhel8@sha256:31dc35a0d58fae4d822e846121f905af4c2c90d595abf1ec7bd0c32e7c54ba71_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/console-header-rhel8@sha256:31dc35a0d58fae4d822e846121f905af4c2c90d595abf1ec7bd0c32e7c54ba71_amd64 |
| Red Hat | rhacm2/multicluster-operators-subscription-rhel8@sha256:7fd1eab9ff7ddfc18fc0fa39639a4c41c291f7bc8d1a1821d6f651c07e56c6ae_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multicluster-operators-subscription-rhel8@sha256:7fd1eab9ff7ddfc18fc0fa39639a4c41c291f7bc8d1a1821d6f651c07e56c6ae_amd64 |
| Red Hat | rhacm2/search-ui-rhel8@sha256:f3bc426a7f92785e4ade7025ce5a69e66dd7360c1a2a5d89ddc1b6e5bf4b0f97_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/search-ui-rhel8@sha256:f3bc426a7f92785e4ade7025ce5a69e66dd7360c1a2a5d89ddc1b6e5bf4b0f97_amd64 |
| Red Hat | rhacm2/multicluster-operators-subscription-release-rhel8@sha256:e45066e1e4764379d64d58306b34a1dae9b084efe177ef1da08bb8434fc23949_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/rcm-controller-rhel8@sha256:f765ff6096fbdb59ff2a44a64bf8c5aaf0765877146bfb0ee31a7dab3b3b48c0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/rcm-controller-rhel8@sha256:f765ff6096fbdb59ff2a44a64bf8c5aaf0765877146bfb0ee31a7dab3b3b48c0_amd64 |
| Red Hat | rhacm2/mcm-topology-api-rhel8@sha256:d5d0965eb55ae4a185806dbf8c199da189f55ceff4bcbd1ac0ee60aebad0a122_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/klusterlet-addon-lease-controller-rhel8@sha256:f322b10bd4d06ff05f07c84cc12aa72a689fa2dda6ee1912cbc4139c98ac6db8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/klusterlet-addon-lease-controller-rhel8@sha256:f322b10bd4d06ff05f07c84cc12aa72a689fa2dda6ee1912cbc4139c98ac6db8_amd64 |
| Red Hat | rhacm2/grc-ui-api-rhel8@sha256:7af26b1375d5867f19bf62f698bfb92fd91606de31b7f67f68bbedaf433e9e3b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/grc-ui-api-rhel8@sha256:7af26b1375d5867f19bf62f698bfb92fd91606de31b7f67f68bbedaf433e9e3b_amd64 |
| Red Hat | rhacm2/mcm-topology-rhel8@sha256:064641bf7409408459a04a007f9b8ee0f1d116b822d9b5a04e1e4aff19782bbd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/mcm-topology-rhel8@sha256:064641bf7409408459a04a007f9b8ee0f1d116b822d9b5a04e1e4aff19782bbd_amd64 |
| Red Hat | rhacm2/multiclusterhub-repo-rhel8@sha256:7db3a7531d69347ca446c648b4dabd1260fbbfb274ebc17b2e8140d236c2a105_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multiclusterhub-repo-rhel8@sha256:7db3a7531d69347ca446c648b4dabd1260fbbfb274ebc17b2e8140d236c2a105_amd64 |
| Red Hat | rhacm2/kui-web-terminal-rhel8@sha256:16f3912e5dc1d2f7ab1db2a09e1be640d416e2070817737aa3f3386b0547cf9c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/endpoint-component-rhel8-operator@sha256:826091c409620c55f22c8d1bafc847a179b65f56894845ec6da4ee1b95f4c662_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/endpoint-component-rhel8-operator@sha256:826091c409620c55f22c8d1bafc847a179b65f56894845ec6da4ee1b95f4c662_amd64 |
…and 57 more
Timeline
- Dec 9, 2021 CVE Published
- Mar 2, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:5038 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2004944 issue
- https://access.redhat.com/security/updates/classification/#low advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2006009 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2013652 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5038.json advisory
- https://access.redhat.com/security/cve/CVE-2021-3795 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-3795 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-3795 advisory
- https://access.redhat.com/security/cve/CVE-2021-23440 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-23440 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-23440 advisory
- https://github.com/advisories/GHSA-4jqc-8m5r-9rpr advisory