VDB
RHSA-2023%3A0698
RHSA-2023%3A0698
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-livenessprobe-rhel8@sha256:60923bcf3c0e73c7aa00b966234892b3f8547f45c84b38b71015f2c187d7bf80_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-livenessprobe-rhel8@sha256:60923bcf3c0e73c7aa00b966234892b3f8547f45c84b38b71015f2c187d7bf80_s390x, *, openshift4/ose-csi-livenessprobe-rhel8@sha256:60923bcf3c0e73c7aa00b966234892b3f8547f45c84b38b71015f2c187d7bf80_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:efeea9cf3b986c9ef2bafcd2778f73c8d4b1265830e6216be28414a3c7800050_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/network-tools-rhel8@sha256:efeea9cf3b986c9ef2bafcd2778f73c8d4b1265830e6216be28414a3c7800050_s390x, openshift4/network-tools-rhel8@sha256:efeea9cf3b986c9ef2bafcd2778f73c8d4b1265830e6216be28414a3c7800050_s390x |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:1f8b2429c990e590687e66cab92b6312bb4999d802bf0d221ccaf569465808a7_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-external-snapshotter-rhel8@sha256:1f8b2429c990e590687e66cab92b6312bb4999d802bf0d221ccaf569465808a7_s390x, openshift4/ose-csi-external-snapshotter-rhel8@sha256:1f8b2429c990e590687e66cab92b6312bb4999d802bf0d221ccaf569465808a7_s390x |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:236fd2c7bb58c45a3108619178e48021d39469946bddedd01ecd4ad649cf1e8e_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-external-resizer@sha256:236fd2c7bb58c45a3108619178e48021d39469946bddedd01ecd4ad649cf1e8e_s390x, openshift4/ose-csi-external-resizer@sha256:236fd2c7bb58c45a3108619178e48021d39469946bddedd01ecd4ad649cf1e8e_s390x |
| Red Hat | openshift4/ose-cluster-baremetal-operator-rhel8@sha256:ac3b2fc155974c9987cd7e06a5660f9a7d2d739402816e55208d7f4789473799_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:ac3b2fc155974c9987cd7e06a5660f9a7d2d739402816e55208d7f4789473799_arm64 |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:ddbfb7e9f4f560afbcc9b7b6658c3a540e14072c6a8f6d1670f94fcff03ffb35_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-kube-scheduler-operator@sha256:ddbfb7e9f4f560afbcc9b7b6658c3a540e14072c6a8f6d1670f94fcff03ffb35_arm64, *, * |
| Red Hat | openshift4/ose-openshift-state-metrics-rhel8@sha256:c57393ef00b91fef30846e338a523e819afdb7a55a41f5aa27221f7241f883f4_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-openshift-state-metrics-rhel8@sha256:c57393ef00b91fef30846e338a523e819afdb7a55a41f5aa27221f7241f883f4_s390x, *, openshift4/ose-openshift-state-metrics-rhel8@sha256:c57393ef00b91fef30846e338a523e819afdb7a55a41f5aa27221f7241f883f4_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:3ffa13255fe91eda1ff814b964d41414eb6ed654dc8e058eb6cdabab49664bb2_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-ovn-kubernetes@sha256:3ffa13255fe91eda1ff814b964d41414eb6ed654dc8e058eb6cdabab49664bb2_amd64, openshift4/ose-ovn-kubernetes@sha256:3ffa13255fe91eda1ff814b964d41414eb6ed654dc8e058eb6cdabab49664bb2_amd64, * |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:e1f1e1a6fa4b5a306b8acec1d1a866aa2f7cf8b7cdd1ed2f97f156e1698189bd_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-snapshot-controller-rhel8@sha256:e1f1e1a6fa4b5a306b8acec1d1a866aa2f7cf8b7cdd1ed2f97f156e1698189bd_s390x, openshift4/ose-csi-snapshot-controller-rhel8@sha256:e1f1e1a6fa4b5a306b8acec1d1a866aa2f7cf8b7cdd1ed2f97f156e1698189bd_s390x |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:35d52a3c3520e377b7f18a8700a3adc8e0a1ce42d295146d4e60eb6c1cfb53c4_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-operator-lifecycle-manager@sha256:35d52a3c3520e377b7f18a8700a3adc8e0a1ce42d295146d4e60eb6c1cfb53c4_arm64, openshift4/ose-operator-lifecycle-manager@sha256:35d52a3c3520e377b7f18a8700a3adc8e0a1ce42d295146d4e60eb6c1cfb53c4_arm64, * |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:06f7d5c006958411ec235c1e30ac81998bd328dffa0b04753fff1769268e6fbc_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-external-provisioner-rhel8@sha256:06f7d5c006958411ec235c1e30ac81998bd328dffa0b04753fff1769268e6fbc_ppc64le, openshift4/ose-csi-external-provisioner-rhel8@sha256:06f7d5c006958411ec235c1e30ac81998bd328dffa0b04753fff1769268e6fbc_ppc64le |
| Red Hat | openshift4/ose-container-networking-plugins-rhel8@sha256:ba7670e8ed99ea25a9d61208a6c2486e1c494d601a8f80d1b87e9ccdfec5d24d_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-container-networking-plugins-rhel8@sha256:ba7670e8ed99ea25a9d61208a6c2486e1c494d601a8f80d1b87e9ccdfec5d24d_s390x, openshift4/ose-container-networking-plugins-rhel8@sha256:ba7670e8ed99ea25a9d61208a6c2486e1c494d601a8f80d1b87e9ccdfec5d24d_s390x |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:9be09dd0ae8cb3c61baf6a27f63e9769af7144757dc4fb0f57afbd11334dbaac_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, *, * |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:9366e6fb4ed319f39aa366be7c66ef0cab7ef356fcf25aba9626a1aae593cb13_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:9366e6fb4ed319f39aa366be7c66ef0cab7ef356fcf25aba9626a1aae593cb13_ppc64le, openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:9366e6fb4ed319f39aa366be7c66ef0cab7ef356fcf25aba9626a1aae593cb13_ppc64le, openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:9366e6fb4ed319f39aa366be7c66ef0cab7ef356fcf25aba9626a1aae593cb13_ppc64le |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:240a5a9288c2ab89229440e5975c69b6e12e7e10aafade39aa26fb83ccd5e9d6_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-thanos-rhel8@sha256:240a5a9288c2ab89229440e5975c69b6e12e7e10aafade39aa26fb83ccd5e9d6_ppc64le, openshift4/ose-thanos-rhel8@sha256:240a5a9288c2ab89229440e5975c69b6e12e7e10aafade39aa26fb83ccd5e9d6_ppc64le |
| Red Hat | openshift4/ose-machine-api-provider-openstack-rhel8@sha256:5d309c502a93795977a0b432bcbb5c51d938f3d51e9330bc6eb1245f59da1b9e_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-machine-api-provider-openstack-rhel8@sha256:5d309c502a93795977a0b432bcbb5c51d938f3d51e9330bc6eb1245f59da1b9e_arm64, *, openshift4/ose-machine-api-provider-openstack-rhel8@sha256:5d309c502a93795977a0b432bcbb5c51d938f3d51e9330bc6eb1245f59da1b9e_arm64 |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:03572f37596528e1c4ea9901cfd80845a52ac64bad5fda4e1abcb8f9098a9cb0_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-insights-rhel8-operator@sha256:03572f37596528e1c4ea9901cfd80845a52ac64bad5fda4e1abcb8f9098a9cb0_arm64 |
| Red Hat | openshift4/ose-csi-external-resizer-rhel8@sha256:bd03b779e0bf4aa31840987c5e9ab71f0bb6e6f6875919c82fe4fcdc5ceb1a8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, * |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:50cdec6955e4bc484f42f3dba226f81b1e0c53a2b46c7c831ba0db0d29e24037_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, * |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:cfe86a3120922af0bbb2f1bf2c028d8806936bfaf4f68ad3315ab34a41e38d11_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:cfe86a3120922af0bbb2f1bf2c028d8806936bfaf4f68ad3315ab34a41e38d11_ppc64le, * |
…and 1116 more
Timeline
- Feb 15, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:0698 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2061794 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2072601 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2092193 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2163037 issue
- https://issues.redhat.com/browse/OCPBUGS-2106 advisory
- https://issues.redhat.com/browse/OCPBUGS-2614 advisory
- https://issues.redhat.com/browse/OCPBUGS-2982 advisory
- https://issues.redhat.com/browse/OCPBUGS-3615 advisory
- https://issues.redhat.com/browse/OCPBUGS-4095 advisory
- https://issues.redhat.com/browse/OCPBUGS-4578 advisory
- https://issues.redhat.com/browse/OCPBUGS-4882 advisory
- https://issues.redhat.com/browse/OCPBUGS-5077 advisory
- https://issues.redhat.com/browse/OCPBUGS-5296 advisory
- https://issues.redhat.com/browse/OCPBUGS-5961 advisory
- https://issues.redhat.com/browse/OCPBUGS-6690 advisory
- https://issues.redhat.com/browse/OCPBUGS-6702 advisory
- https://issues.redhat.com/browse/OCPBUGS-6754 advisory
…and 11 more