VDB
RHSA-2022%3A0283
RHSA-2022%3A0283
PUBLISHED
CVSS 8.600000381469727 HIGH
A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-mdns-publisher-rhel8@sha256:f3d3f76b68b2fdcca42f43b1b1e8fbcfcc63978db6bb8f2da98082f7bcaa5117_s390x as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:ffd9536c7daa0e37dae53ab1fed072dd2d25d63fbcfd7d163515a83529d7ad70_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:ffd9536c7daa0e37dae53ab1fed072dd2d25d63fbcfd7d163515a83529d7ad70_ppc64le |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:4bdbc37a18b44d15caae2b66e40bd22305cb08fd27fb14e770813f25c32f98a7_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/egress-router-cni-rhel8@sha256:4bdbc37a18b44d15caae2b66e40bd22305cb08fd27fb14e770813f25c32f98a7_ppc64le |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:142e25b5473c63e1d3132a32f749f920e738dfbf2cce21998f6d68358f1fcdbe_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel8@sha256:38c4e568ecdeaccd45662542ebe7b248990c838d5ead7f6bf00cb175f41219f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-multus-route-override-cni-rhel8@sha256:38c4e568ecdeaccd45662542ebe7b248990c838d5ead7f6bf00cb175f41219f4_ppc64le |
| Red Hat | openshift4/ose-multus-cni@sha256:1b2c2d6928aefb3914ba7cd735b34bb20807a76b8e618541ce9a1cb6face9ea4_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-csi-livenessprobe@sha256:2e43528c50a8b9664750b8f741da78ebd6f0aa4096cda7709ff47b8a4aac58e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-csi-livenessprobe@sha256:2e43528c50a8b9664750b8f741da78ebd6f0aa4096cda7709ff47b8a4aac58e7_ppc64le |
| Red Hat | openshift4/ose-jenkins@sha256:871c3b8a6b53fac7f70960fabc304dcc9f845e85d438b5b9beb2dffc0e274b54_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-jenkins@sha256:871c3b8a6b53fac7f70960fabc304dcc9f845e85d438b5b9beb2dffc0e274b54_ppc64le |
| Red Hat | openshift4/ose-machine-config-operator@sha256:78a6f13582dea766fb45a37f64e47e23035e5ec6d96b7eb685596b15932faf49_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-machine-config-operator@sha256:78a6f13582dea766fb45a37f64e47e23035e5ec6d96b7eb685596b15932faf49_amd64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:1b1f1aef21bc0383213392f4c12c52023e28fc88061c56d6e969516d47a04f55_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:fbbc35da3d4ed772bc01b15f2ccd7054617c9ea50ee5308a2d15af7c2bde8bc6_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-network-operator@sha256:fbbc35da3d4ed772bc01b15f2ccd7054617c9ea50ee5308a2d15af7c2bde8bc6_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:b21b4f757e960d8b6609792981d4cbcc97d181e0e0d5ab2d3a7e88e76250ea16_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-ovn-kubernetes@sha256:b21b4f757e960d8b6609792981d4cbcc97d181e0e0d5ab2d3a7e88e76250ea16_amd64 |
| Red Hat | openshift4/ose-docker-builder@sha256:fb2fed78536d4762c276d30d796e70c5c6fe6256ce86fc98a85a4d7343d83a83_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-docker-builder@sha256:fb2fed78536d4762c276d30d796e70c5c6fe6256ce86fc98a85a4d7343d83a83_s390x |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:e766dae3c0784ab9eca78dd0a1ad1d9a1b1f0f9c2cf6179ed275e293815571c6_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-image-registry-operator@sha256:e766dae3c0784ab9eca78dd0a1ad1d9a1b1f0f9c2cf6179ed275e293815571c6_amd64 |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:887f309c3e4197c09ec68bdb6f6a7360de94c627f231f52a93a18974e63f9d63_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-kube-scheduler-operator@sha256:887f309c3e4197c09ec68bdb6f6a7360de94c627f231f52a93a18974e63f9d63_amd64 |
| Red Hat | openshift4/ose-must-gather@sha256:becbcfd40a417b8a99d00ed47ac5de633a92cd951e421625669d2812b5212a1d_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-must-gather@sha256:becbcfd40a417b8a99d00ed47ac5de633a92cd951e421625669d2812b5212a1d_s390x |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:3d1961767fce3474e907e912ec477889c1059c2d51b9352c66c631f31b64a132_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-prometheus-alertmanager@sha256:3d1961767fce3474e907e912ec477889c1059c2d51b9352c66c631f31b64a132_s390x |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:8edb4644b79ddbc26d859ae0687d17cdecd95dc3523e738e566c4dfcbc415382_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | * |
| Red Hat | openshift4/ose-cluster-policy-controller-rhel8@sha256:5a1208a2ae3b476a99bb46c941afa49b2ada4ee3e1cb99d2722e0d50cef2a567_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-policy-controller-rhel8@sha256:5a1208a2ae3b476a99bb46c941afa49b2ada4ee3e1cb99d2722e0d50cef2a567_ppc64le |
| Red Hat | openshift4/ose-jenkins@sha256:9909d2a09db369f18c7f6068cf7565e572543befe88d991bf29782cdaec6fd7d_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-jenkins@sha256:9909d2a09db369f18c7f6068cf7565e572543befe88d991bf29782cdaec6fd7d_amd64 |
…and 357 more
Timeline
- Feb 3, 2022 CVE Published
- Mar 26, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:0283 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1921650 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1928761 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2020716 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2034506 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2039282 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2039341 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0283.json advisory
- https://access.redhat.com/security/cve/CVE-2021-3121 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-3121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-3121 advisory