VDB
RHSA-2023%3A0634
RHSA-2023%3A0634
PUBLISHED
CVSS 7.5 HIGH
A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service (ReDoS) attacks, affecting system availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:8f56f6cfcefce491100202c674fba06fed29d229d09fd403af684a8b0afc218a_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:858101734cc768f08c2038dd4599a65d06ef542946b382a61345ea996f10767a_s390x as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:4c9bc0d6da393a273f955ec5a2331802e55c0304c30946fe9f3a196ab65269cb_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:4c9bc0d6da393a273f955ec5a2331802e55c0304c30946fe9f3a196ab65269cb_ppc64le |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:2e0198621752c21e91880c43e0e9422a47a9c0896a203db650627b94d0bdca3f_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:2e0198621752c21e91880c43e0e9422a47a9c0896a203db650627b94d0bdca3f_s390x |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:de74ce01341c7d828f2062761a0a55d26d9404c037660b5375e24d6852a75776_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:de74ce01341c7d828f2062761a0a55d26d9404c037660b5375e24d6852a75776_amd64 |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:232ab968f4939f7033e766368b6b8bcee1c95b23f50d882046770389fc08d239_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:232ab968f4939f7033e766368b6b8bcee1c95b23f50d882046770389fc08d239_s390x |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:aa657093086192be2ba284a9717fc954adef7586adc0eb14ea359c125fdc31bf_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:03be01e2a187e591d247056d1dc1d2e0564ec5075a735f848106bdc7eb0d9604_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:03be01e2a187e591d247056d1dc1d2e0564ec5075a735f848106bdc7eb0d9604_arm64 |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:e7cc396a0d1dcfdf37c644e07c3d25e808c030c0312a6a746b6518dd9eab08a5_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/vector-rhel8@sha256:3e71263bd9c7f0654a1e6d301b6a48be3b08afb162f52466e7343c3dc651b8d1_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/vector-rhel8@sha256:3e71263bd9c7f0654a1e6d301b6a48be3b08afb162f52466e7343c3dc651b8d1_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:25cb1899ebba4c94accd69793a3013feaa89a088f8e09700063b67034894860c_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:25cb1899ebba4c94accd69793a3013feaa89a088f8e09700063b67034894860c_s390x |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:08a93c3c45b229cb3f245ed79da1fe160e68e3db898c388c98a951640835a8f3_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:08a93c3c45b229cb3f245ed79da1fe160e68e3db898c388c98a951640835a8f3_ppc64le |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:ae2561c4d894a080f843f4e1c094800d4001bff0f5e85a6add7d9d80b026418a_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:ae2561c4d894a080f843f4e1c094800d4001bff0f5e85a6add7d9d80b026418a_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:cf84cd05812a7cbceb56f44248d1bab0de685c8de5f67a581564f4b88878fcfb_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:cf84cd05812a7cbceb56f44248d1bab0de685c8de5f67a581564f4b88878fcfb_arm64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:6431e8d36b8089c41741d0c9d8b2afee23b9fe5a1553df8b0433d6c149eeb74d_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:6431e8d36b8089c41741d0c9d8b2afee23b9fe5a1553df8b0433d6c149eeb74d_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:b009a0de0146e516bf076da58041e223e89ef9ef95fbf38008bce8dcaf717c88_ppc64le as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:efb0d4ccc141ed513e1763aa3d3c290590f099f7ff6bc66a4f0fb05a1e816357_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:efb0d4ccc141ed513e1763aa3d3c290590f099f7ff6bc66a4f0fb05a1e816357_amd64 |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:ff883b736157042771802f19c84eb6c420736437dc74022127edcf277d7f0729_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:ff883b736157042771802f19c84eb6c420736437dc74022127edcf277d7f0729_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:6d1985607bf1731889bc8b9b5687ac4e2df9380c168822738107e949735d73d0_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:6d1985607bf1731889bc8b9b5687ac4e2df9380c168822738107e949735d73d0_ppc64le |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:8ea6f2d793049e2c1e36d9680d9a10c5f9b36bbdeb9b04da046f12a8458889e1_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:8ea6f2d793049e2c1e36d9680d9a10c5f9b36bbdeb9b04da046f12a8458889e1_ppc64le |
…and 43 more
Timeline
- Feb 9, 2023 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:0634 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2156263 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2156324 issue
- https://issues.redhat.com/browse/LOG-3397 advisory
- https://issues.redhat.com/browse/LOG-3441 advisory
- https://issues.redhat.com/browse/LOG-3463 advisory
- https://issues.redhat.com/browse/LOG-3477 advisory
- https://issues.redhat.com/browse/LOG-3494 advisory
- https://issues.redhat.com/browse/LOG-3496 advisory
- https://issues.redhat.com/browse/LOG-3510 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0634.json advisory
- https://access.redhat.com/security/cve/CVE-2021-35065 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-35065 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-35065 advisory
- https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294 advisory
- https://access.redhat.com/security/cve/CVE-2022-46175 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-46175 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-46175 advisory
- https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h advisory