VDB
RHSA-2022%3A5909
RHSA-2022%3A5909
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:e1457b0db837645a9cb0608c8f1b315e8998fa87a989fe54df110fa08a9c2be8_s390x as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:5c48b24b4659340d67ccfd372e3fe156450509e7afbcc267f8497526f4cda86b_s390x as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:b2be393a9eaf1914a29c7b8d32fdca3f6359cc1de1fd4993850a91cbeba18263_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch-rhel8-operator@sha256:b2be393a9eaf1914a29c7b8d32fdca3f6359cc1de1fd4993850a91cbeba18263_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:4f9233ef16af6b2c586e633f44c09a35938a5af776cf617bb8b1e8b92905b587_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:7543a788626b61e4bbab1600977721772ad53db026c8c869e53a0eaa213e4f9b_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/kibana6-rhel8@sha256:7543a788626b61e4bbab1600977721772ad53db026c8c869e53a0eaa213e4f9b_ppc64le |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:64ca2fad1e9e87857fb684f5272ebea197b645acb17dd9e8b0e951ee5b29cc16_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:15b3bbcc7bd73cdb5e7eae3039a2bb8039b43525798061a9e443a58028dd8018_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:15b3bbcc7bd73cdb5e7eae3039a2bb8039b43525798061a9e443a58028dd8018_ppc64le |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:64ca2fad1e9e87857fb684f5272ebea197b645acb17dd9e8b0e951ee5b29cc16_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/cluster-logging-rhel8-operator@sha256:64ca2fad1e9e87857fb684f5272ebea197b645acb17dd9e8b0e951ee5b29cc16_amd64 |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:5c48b24b4659340d67ccfd372e3fe156450509e7afbcc267f8497526f4cda86b_s390x as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:1c349d4da14ba9c6733b96b56bb6ac5959efe27498a58e439aef347c4595dd79_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/logging-curator5-rhel8@sha256:1c349d4da14ba9c6733b96b56bb6ac5959efe27498a58e439aef347c4595dd79_amd64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:05aea6a46b111d07c4ef754e8158861b395d43d63ea1b6e5c5dc790cddb751a5_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/kibana6-rhel8@sha256:05aea6a46b111d07c4ef754e8158861b395d43d63ea1b6e5c5dc790cddb751a5_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:39dfd041b722ec9abf2efe662968d0a550e06d6f821b5db5b49081f88ab1f6d5_ppc64le as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:8446f9e43c11ecc05372ae578136a668db1f0e6deb1e6ecb74a5042a051ba8c9_amd64 as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:8446f9e43c11ecc05372ae578136a668db1f0e6deb1e6ecb74a5042a051ba8c9_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:6447b662b055fbc87e1820b3e3883090e6fd48b308ab77d23accdbdf4bb71fd8_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch6-rhel8@sha256:6447b662b055fbc87e1820b3e3883090e6fd48b308ab77d23accdbdf4bb71fd8_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:b4e8118ce3c6db1de05b27e6569f0a0a6b1f4a69d63e3b186c4137a4e879b50b_ppc64le as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:6447b662b055fbc87e1820b3e3883090e6fd48b308ab77d23accdbdf4bb71fd8_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch6-rhel8@sha256:6447b662b055fbc87e1820b3e3883090e6fd48b308ab77d23accdbdf4bb71fd8_ppc64le |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:c6da531ffd8ebfe4ff02deee6a0be0688a9569c9340bf0237ef792c02d9459d4_s390x as a component of OpenShift Logging 5.2 | openshift-logging/fluentd-rhel8@sha256:c6da531ffd8ebfe4ff02deee6a0be0688a9569c9340bf0237ef792c02d9459d4_s390x |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:4f9233ef16af6b2c586e633f44c09a35938a5af776cf617bb8b1e8b92905b587_amd64 as a component of OpenShift Logging 5.2 | * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:e1457b0db837645a9cb0608c8f1b315e8998fa87a989fe54df110fa08a9c2be8_s390x as a component of OpenShift Logging 5.2 | openshift-logging/elasticsearch6-rhel8@sha256:e1457b0db837645a9cb0608c8f1b315e8998fa87a989fe54df110fa08a9c2be8_s390x |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:7543a788626b61e4bbab1600977721772ad53db026c8c869e53a0eaa213e4f9b_ppc64le as a component of OpenShift Logging 5.2 | openshift-logging/kibana6-rhel8@sha256:7543a788626b61e4bbab1600977721772ad53db026c8c869e53a0eaa213e4f9b_ppc64le |
…and 32 more
Timeline
- Aug 4, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:5909 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2100495 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5909.json advisory
- https://access.redhat.com/security/cve/CVE-2021-38561 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-38561 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-38561 advisory
- https://pkg.go.dev/vuln/GO-2021-0113 advisory