VDB
RHSA-2023%3A2695
RHSA-2023%3A2695
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:794e46d3111eeec942d2b5cc03774d2a5e86c558f3da5df45fa5245738c3ff09_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:794e46d3111eeec942d2b5cc03774d2a5e86c558f3da5df45fa5245738c3ff09_amd64, openshift4/ose-operator-sdk-rhel8@sha256:794e46d3111eeec942d2b5cc03774d2a5e86c558f3da5df45fa5245738c3ff09_amd64 |
| Red Hat | openshift4/ose-sriov-cni@sha256:28c43dc17f51b1dbe58dfed83bf42fd7b05848839c30113d1864fd2ae47aeaed_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-sriov-cni@sha256:28c43dc17f51b1dbe58dfed83bf42fd7b05848839c30113d1864fd2ae47aeaed_ppc64le, * |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:d609fc2054a29c166e7d345acb7519a3a7bb808ea0371f33b5e6635147f6b348_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-operator@sha256:d609fc2054a29c166e7d345acb7519a3a7bb808ea0371f33b5e6635147f6b348_ppc64le, * |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:ed81dbe105ad23e63eb2d2b03a0299bce6b2afadf6be3b19e345da222c675140_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-operator@sha256:ed81dbe105ad23e63eb2d2b03a0299bce6b2afadf6be3b19e345da222c675140_amd64, *, openshift4/ose-sriov-network-operator@sha256:ed81dbe105ad23e63eb2d2b03a0299bce6b2afadf6be3b19e345da222c675140_amd64 |
| Red Hat | openshift4/ose-ansible-operator@sha256:68cb72896270cdb9cd36c7c3bf01738c9e85546a9d959e3b6e49c8b542f22160_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ansible-operator@sha256:68cb72896270cdb9cd36c7c3bf01738c9e85546a9d959e3b6e49c8b542f22160_s390x, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:f8fbdaf8fc83bbc512a3cf86e5bbf45ae3398ba7a9a2a80a5d8e5f97567997f0_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:f8fbdaf8fc83bbc512a3cf86e5bbf45ae3398ba7a9a2a80a5d8e5f97567997f0_arm64, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:bd59d575bd7a7e306e5b689ea10fa2455a9fb8ad4ebdda781ea58d14a3f8f9a7_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:bd59d575bd7a7e306e5b689ea10fa2455a9fb8ad4ebdda781ea58d14a3f8f9a7_amd64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:1c1848728e748d12672852b2cfbb20d62a00aa7ff32783e2390f6b24c1b212a7_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:1c1848728e748d12672852b2cfbb20d62a00aa7ff32783e2390f6b24c1b212a7_arm64, openshift4/ose-operator-sdk-rhel8@sha256:1c1848728e748d12672852b2cfbb20d62a00aa7ff32783e2390f6b24c1b212a7_arm64, openshift4/ose-operator-sdk-rhel8@sha256:1c1848728e748d12672852b2cfbb20d62a00aa7ff32783e2390f6b24c1b212a7_arm64 |
| Red Hat | openshift4/ose-ansible-operator@sha256:a832d737fa1da499765d9bf95166ebe6edd529d1a3f7c1613fda10d823e414aa_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ansible-operator@sha256:a832d737fa1da499765d9bf95166ebe6edd529d1a3f7c1613fda10d823e414aa_arm64, openshift4/ose-ansible-operator@sha256:a832d737fa1da499765d9bf95166ebe6edd529d1a3f7c1613fda10d823e414aa_arm64, openshift4/ose-ansible-operator@sha256:a832d737fa1da499765d9bf95166ebe6edd529d1a3f7c1613fda10d823e414aa_arm64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:ba1553d5ae12f1dd2fa988212d214dedc5fa4fe57d3c74c8adb7de8ad69347ce_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:ba1553d5ae12f1dd2fa988212d214dedc5fa4fe57d3c74c8adb7de8ad69347ce_ppc64le, openshift4/ose-operator-sdk-rhel8@sha256:ba1553d5ae12f1dd2fa988212d214dedc5fa4fe57d3c74c8adb7de8ad69347ce_ppc64le |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:baee251fc52b51301181ffa8d33048d93c67b3aa3fbe9b8304cd9100b74e4b53_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:baee251fc52b51301181ffa8d33048d93c67b3aa3fbe9b8304cd9100b74e4b53_ppc64le, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:0679bfcf0bd855a44f519a577c6b8d505ad53f28e3b80ad71dac18442b21a8c8_s390x |
| Red Hat | openshift4/ose-ansible-operator@sha256:c17303fdd9492ae67355209e2acebc295fff6e1696be312ae9a96f6963d014cf_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ansible-operator@sha256:c17303fdd9492ae67355209e2acebc295fff6e1696be312ae9a96f6963d014cf_ppc64le, openshift4/ose-ansible-operator@sha256:c17303fdd9492ae67355209e2acebc295fff6e1696be312ae9a96f6963d014cf_ppc64le |
| Red Hat | openshift4/ose-sriov-network-operator@sha256:1045842fbdcee42b2b34f4865d273e16e4caa8e155fa3b3ed2a3dfaf12939aed_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-operator@sha256:1045842fbdcee42b2b34f4865d273e16e4caa8e155fa3b3ed2a3dfaf12939aed_arm64, openshift4/ose-sriov-network-operator@sha256:1045842fbdcee42b2b34f4865d273e16e4caa8e155fa3b3ed2a3dfaf12939aed_arm64, openshift4/ose-sriov-network-operator@sha256:1045842fbdcee42b2b34f4865d273e16e4caa8e155fa3b3ed2a3dfaf12939aed_arm64 |
| Red Hat | openshift4/ose-sriov-cni@sha256:87787352343d03408bc3463a3f06f2b28635e4490113f04c56babeec6bae8391_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-cni@sha256:87787352343d03408bc3463a3f06f2b28635e4490113f04c56babeec6bae8391_amd64, openshift4/ose-sriov-cni@sha256:87787352343d03408bc3463a3f06f2b28635e4490113f04c56babeec6bae8391_amd64 |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:342bba46a99e176615bf913fff6bdec094564e3f6e03b8e53c65c145b4cbf316_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-sdk-rhel8@sha256:342bba46a99e176615bf913fff6bdec094564e3f6e03b8e53c65c145b4cbf316_s390x, openshift4/ose-operator-sdk-rhel8@sha256:342bba46a99e176615bf913fff6bdec094564e3f6e03b8e53c65c145b4cbf316_s390x |
| Red Hat | openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64, openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64, openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64 |
| Red Hat | openshift4/ose-sriov-cni@sha256:28c43dc17f51b1dbe58dfed83bf42fd7b05848839c30113d1864fd2ae47aeaed_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-cni@sha256:28c43dc17f51b1dbe58dfed83bf42fd7b05848839c30113d1864fd2ae47aeaed_ppc64le, openshift4/ose-sriov-cni@sha256:28c43dc17f51b1dbe58dfed83bf42fd7b05848839c30113d1864fd2ae47aeaed_ppc64le |
| Red Hat | openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64, openshift4/ose-ansible-operator@sha256:f73ca043b7c0d3b69759393d83ed2ba37828d0bc0e6fa10497e4ee887f9a9a9f_amd64 |
…and 16 more
Timeline
- May 18, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:2695 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2163037 issue
- https://issues.redhat.com/browse/OCPBUGS-4603 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2695.json advisory
- https://access.redhat.com/security/cve/CVE-2022-3064 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-3064 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3064 advisory
- https://github.com/advisories/GHSA-6q6q-88xp-6f2r advisory
- https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5 advisory
- https://github.com/go-yaml/yaml/releases/tag/v2.2.4 advisory
- https://pkg.go.dev/vuln/GO-2022-0956 advisory