VDB
RHSA-2023%3A0566
RHSA-2023%3A0566
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/cloud-event-proxy-rhel8@sha256:91e8fb6ad9f34032c68da2da41aa26fe5d3acee387c7039529eaff95a69ad5e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/cloud-event-proxy-rhel8@sha256:91e8fb6ad9f34032c68da2da41aa26fe5d3acee387c7039529eaff95a69ad5e1_ppc64le, openshift4/cloud-event-proxy-rhel8@sha256:91e8fb6ad9f34032c68da2da41aa26fe5d3acee387c7039529eaff95a69ad5e1_ppc64le |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:6bf72cbfa9a506c00017cf972d923618c264f145dd093c64fb9c36f1040d79b2_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel8@sha256:91e8fb6ad9f34032c68da2da41aa26fe5d3acee387c7039529eaff95a69ad5e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cloud-event-proxy-rhel8@sha256:91e8fb6ad9f34032c68da2da41aa26fe5d3acee387c7039529eaff95a69ad5e1_ppc64le, * |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel8@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cloud-event-proxy-rhel8@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:fa2759c9a31531832c3c86a2060ab73fd68f31862159591d06e142e38e3d3750_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:fa2759c9a31531832c3c86a2060ab73fd68f31862159591d06e142e38e3d3750_arm64, openshift4/ose-operator-sdk-rhel8@sha256:fa2759c9a31531832c3c86a2060ab73fd68f31862159591d06e142e38e3d3750_arm64 |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel8@sha256:506335481f09e001571b0848af76dcc0fa3f28d37e51ab41e738f46cb5fea67e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:41e170160e2dd1455f32dfec40a1ada1e83ba29e8fa5a25e9c568c251657cc2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:41e170160e2dd1455f32dfec40a1ada1e83ba29e8fa5a25e9c568c251657cc2c_ppc64le, * |
| Red Hat | openshift4/cloud-event-proxy-rhel8@sha256:506335481f09e001571b0848af76dcc0fa3f28d37e51ab41e738f46cb5fea67e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/cloud-event-proxy-rhel8@sha256:506335481f09e001571b0848af76dcc0fa3f28d37e51ab41e738f46cb5fea67e_arm64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:25c786e95bbc2bd94180392ca4ea3fb2b0698da2c9a87fe279afb35d50207ee2_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-operator-sdk-rhel8@sha256:25c786e95bbc2bd94180392ca4ea3fb2b0698da2c9a87fe279afb35d50207ee2_s390x |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:41e170160e2dd1455f32dfec40a1ada1e83ba29e8fa5a25e9c568c251657cc2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:41e170160e2dd1455f32dfec40a1ada1e83ba29e8fa5a25e9c568c251657cc2c_ppc64le, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:41e170160e2dd1455f32dfec40a1ada1e83ba29e8fa5a25e9c568c251657cc2c_ppc64le |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:25c786e95bbc2bd94180392ca4ea3fb2b0698da2c9a87fe279afb35d50207ee2_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:34b34480b973113c6851b9758aaf6467864095cd057467ceabd7cbb0bde70e7f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:34b34480b973113c6851b9758aaf6467864095cd057467ceabd7cbb0bde70e7f_amd64, * |
| Red Hat | openshift4/cloud-event-proxy-rhel8@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/cloud-event-proxy-rhel8@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64, * |
| Red Hat | openshift4/ose-cloud-event-proxy@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cloud-event-proxy@sha256:958ce538d7ceaba7efde68e42a571fc66c48969c5009a2ffdb2626b5f2fd13e6_amd64, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:e9a1bba3f4520a4718dff8e09e728bb4d08397a21b00cb0df2e5743203f23efb_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:e9a1bba3f4520a4718dff8e09e728bb4d08397a21b00cb0df2e5743203f23efb_s390x, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:e9a1bba3f4520a4718dff8e09e728bb4d08397a21b00cb0df2e5743203f23efb_s390x |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:8908c15c0564840b714b52b95fe8794c906d33be01367a441f612b572c70f509_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:8908c15c0564840b714b52b95fe8794c906d33be01367a441f612b572c70f509_arm64, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:8908c15c0564840b714b52b95fe8794c906d33be01367a441f612b572c70f509_arm64 |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5a2968eb8fd3ac7660fd1b7736c374f1af94bd49f284e4c857d66d37b1473e7e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5a2968eb8fd3ac7660fd1b7736c374f1af94bd49f284e4c857d66d37b1473e7e_arm64, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5a2968eb8fd3ac7660fd1b7736c374f1af94bd49f284e4c857d66d37b1473e7e_arm64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:fa2759c9a31531832c3c86a2060ab73fd68f31862159591d06e142e38e3d3750_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-operator-sdk-rhel8@sha256:fa2759c9a31531832c3c86a2060ab73fd68f31862159591d06e142e38e3d3750_arm64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:34b34480b973113c6851b9758aaf6467864095cd057467ceabd7cbb0bde70e7f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:34b34480b973113c6851b9758aaf6467864095cd057467ceabd7cbb0bde70e7f_amd64, openshift4/ose-operator-sdk-rhel8@sha256:34b34480b973113c6851b9758aaf6467864095cd057467ceabd7cbb0bde70e7f_amd64 |
| Red Hat | openshift4/ose-ptp-operator@sha256:94561bdb9d77dd1ceefc5d807db7e681c0dab0c1a0bdc9f16632997546183830_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-ptp-operator@sha256:94561bdb9d77dd1ceefc5d807db7e681c0dab0c1a0bdc9f16632997546183830_ppc64le |
…and 36 more
Timeline
- Feb 7, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:0566 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2100495 issue
- https://issues.redhat.com/browse/OCPBUGS-5555 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0566.json advisory
- https://access.redhat.com/security/cve/CVE-2021-38561 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-38561 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-38561 advisory
- https://pkg.go.dev/vuln/GO-2021-0113 advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory