VDB
RHSA-2023%3A2111
RHSA-2023%3A2111
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cloud-event-proxy@sha256:805d1e17fdfa2737fddfcded66aad5407429b5ddbe78941ba6a4dcbf19559091_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cloud-event-proxy@sha256:805d1e17fdfa2737fddfcded66aad5407429b5ddbe78941ba6a4dcbf19559091_amd64, *, openshift4/ose-cloud-event-proxy@sha256:805d1e17fdfa2737fddfcded66aad5407429b5ddbe78941ba6a4dcbf19559091_amd64 |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:e707c7efeed6d87a9f2eb4be6862ea725a96bf2e3bfffab3d849030b5f655a2f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-network-operator@sha256:e707c7efeed6d87a9f2eb4be6862ea725a96bf2e3bfffab3d849030b5f655a2f_ppc64le, openshift4/ose-sriov-network-operator@sha256:e707c7efeed6d87a9f2eb4be6862ea725a96bf2e3bfffab3d849030b5f655a2f_ppc64le |
| Red Hat | openshift4/ose-descheduler@sha256:fdb86594a062f33d802c5cdfc91a24d7b1a18900659154fa685fb35326093e6e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-descheduler@sha256:fdb86594a062f33d802c5cdfc91a24d7b1a18900659154fa685fb35326093e6e_amd64 |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ae814111d31da3b66bfdbdb669e836e3e4449e3134d2dc408e3d8708d03dd7bf_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ae814111d31da3b66bfdbdb669e836e3e4449e3134d2dc408e3d8708d03dd7bf_s390x, *, * |
| Red Hat | openshift4/ose-local-storage-operator@sha256:0277e2bf8a576c4e105eaedea8cb5a7894ebed78e30f2b76cee81f9cc79e628f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-local-storage-operator@sha256:0277e2bf8a576c4e105eaedea8cb5a7894ebed78e30f2b76cee81f9cc79e628f_ppc64le, * |
| Red Hat | openshift4/ose-ptp-operator@sha256:cbc521e30d1bcdcab7de28fb45484872b940ab09ee76afa984f1e0ccaee81588_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-ptp-operator@sha256:cbc521e30d1bcdcab7de28fb45484872b940ab09ee76afa984f1e0ccaee81588_arm64 |
| Red Hat | openshift4/ose-ansible-operator@sha256:8e04d4445ddeff2951e371ea0832bb295b1ac251874787c3b06000a5e0aead0c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ansible-operator@sha256:8e04d4445ddeff2951e371ea0832bb295b1ac251874787c3b06000a5e0aead0c_ppc64le, openshift4/ose-ansible-operator@sha256:8e04d4445ddeff2951e371ea0832bb295b1ac251874787c3b06000a5e0aead0c_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:1ebcf2886f055f5d065e2926767d6498fa3482def31981c9e6be3ecd98c4d3d4_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:1ebcf2886f055f5d065e2926767d6498fa3482def31981c9e6be3ecd98c4d3d4_ppc64le, openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:1ebcf2886f055f5d065e2926767d6498fa3482def31981c9e6be3ecd98c4d3d4_ppc64le |
| Red Hat | openshift4/ose-ansible-operator@sha256:7dbe2a567d06b6bef9acebf70675be028b95cb767d13fac51684aec7586ba0c7_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ansible-operator@sha256:7dbe2a567d06b6bef9acebf70675be028b95cb767d13fac51684aec7586ba0c7_amd64, * |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:1e786c721f6de7c27f8558de0ac17bf6adbceef5cd1c2694be052362f3a3bc30_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-dp-admission-controller@sha256:1e786c721f6de7c27f8558de0ac17bf6adbceef5cd1c2694be052362f3a3bc30_amd64, openshift4/ose-sriov-dp-admission-controller@sha256:1e786c721f6de7c27f8558de0ac17bf6adbceef5cd1c2694be052362f3a3bc30_amd64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:48c626565368f7bb8590909ecf1d7cf0c5a17bcc6807cb27b78f9541b879c2ed_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-local-storage-diskmaker@sha256:48c626565368f7bb8590909ecf1d7cf0c5a17bcc6807cb27b78f9541b879c2ed_amd64 |
| Red Hat | openshift4/ose-cluster-capacity@sha256:370e47d6b231d58c316406143d179614ee68785e01cb4a446aba6a53c4f509bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-capacity@sha256:370e47d6b231d58c316406143d179614ee68785e01cb4a446aba6a53c4f509bd_ppc64le, openshift4/ose-cluster-capacity@sha256:370e47d6b231d58c316406143d179614ee68785e01cb4a446aba6a53c4f509bd_ppc64le, openshift4/ose-cluster-capacity@sha256:370e47d6b231d58c316406143d179614ee68785e01cb4a446aba6a53c4f509bd_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:73ee5e6a343011103e171877c1ba4002a42788a3df9dcc453ba951847b3d3bb6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-descheduler-operator@sha256:73ee5e6a343011103e171877c1ba4002a42788a3df9dcc453ba951847b3d3bb6_amd64, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:83172c58d13e5f0174f148ab9fff0355b078acce3f8f2c613c979974f782fb0f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:83172c58d13e5f0174f148ab9fff0355b078acce3f8f2c613c979974f782fb0f_amd64, *, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:83172c58d13e5f0174f148ab9fff0355b078acce3f8f2c613c979974f782fb0f_amd64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:29826c377539db7270a8150528a70219e88e994eb3ab087186845c232e567efa_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-diskmaker@sha256:29826c377539db7270a8150528a70219e88e994eb3ab087186845c232e567efa_s390x, openshift4/ose-local-storage-diskmaker@sha256:29826c377539db7270a8150528a70219e88e994eb3ab087186845c232e567efa_s390x, openshift4/ose-local-storage-diskmaker@sha256:29826c377539db7270a8150528a70219e88e994eb3ab087186845c232e567efa_s390x |
| Red Hat | openshift4/ose-sriov-network-webhook@sha256:f90dabad976e8f771068e0e6dc2653d12b73e64262976d14aeee04dfaaf2b3a6_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-network-webhook@sha256:f90dabad976e8f771068e0e6dc2653d12b73e64262976d14aeee04dfaaf2b3a6_ppc64le, *, openshift4/ose-sriov-network-webhook@sha256:f90dabad976e8f771068e0e6dc2653d12b73e64262976d14aeee04dfaaf2b3a6_ppc64le |
| Red Hat | openshift4/ose-descheduler@sha256:e6a70396d7828f41069b0135fd24cc525e688580eb03eb55662495c214e3b08e_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-descheduler@sha256:e6a70396d7828f41069b0135fd24cc525e688580eb03eb55662495c214e3b08e_arm64, openshift4/ose-descheduler@sha256:e6a70396d7828f41069b0135fd24cc525e688580eb03eb55662495c214e3b08e_arm64 |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:73f9b59472cbb60315d1863fc658699e75c70119618b4693bbb1e2ffb23d8c59_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:73f9b59472cbb60315d1863fc658699e75c70119618b4693bbb1e2ffb23d8c59_s390x |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:3ab387903c971cce454c95555e4b8f919cbbb186f11449ddbd14c69c02b343d2_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift-tech-preview/metallb-rhel8@sha256:3ab387903c971cce454c95555e4b8f919cbbb186f11449ddbd14c69c02b343d2_s390x, openshift-tech-preview/metallb-rhel8@sha256:3ab387903c971cce454c95555e4b8f919cbbb186f11449ddbd14c69c02b343d2_s390x |
| Red Hat | openshift4/ose-service-idler-rhel8@sha256:72bc9ad52fb936466b655538111bb8eef830918f5cab6da58503041017c8af98_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-service-idler-rhel8@sha256:72bc9ad52fb936466b655538111bb8eef830918f5cab6da58503041017c8af98_arm64, openshift4/ose-service-idler-rhel8@sha256:72bc9ad52fb936466b655538111bb8eef830918f5cab6da58503041017c8af98_arm64 |
…and 328 more
Timeline
- May 10, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:2111 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html advisory
- https://access.redhat.com/articles/11258 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2163037 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2111.json advisory
- https://access.redhat.com/security/cve/CVE-2022-3064 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-3064 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3064 advisory
- https://github.com/advisories/GHSA-6q6q-88xp-6f2r advisory
- https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5 advisory
- https://github.com/go-yaml/yaml/releases/tag/v2.2.4 advisory
- https://pkg.go.dev/vuln/GO-2022-0956 advisory