VDB
RHSA-2023%3A3542
RHSA-2023%3A3542
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-service-ca-operator@sha256:9b7481ee5238edaca51e8f1799ff46a3b96eb894f72855c852cac68d70cea4e0_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-service-ca-operator@sha256:9b7481ee5238edaca51e8f1799ff46a3b96eb894f72855c852cac68d70cea4e0_amd64 |
| Red Hat | openshift4/ose-docker-registry@sha256:6e9d2a25e0bea8f838ec55fb9ac1c3567692e4189b30f4321c2a4ece7f747483_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-docker-registry@sha256:6e9d2a25e0bea8f838ec55fb9ac1c3567692e4189b30f4321c2a4ece7f747483_arm64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel8@sha256:d08549470ee3a5b14a4f42dd0f1c23d2a4212b99e953d31123e51a05cecabdad_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openshift-apiserver-rhel8@sha256:d08549470ee3a5b14a4f42dd0f1c23d2a4212b99e953d31123e51a05cecabdad_ppc64le |
| Red Hat | openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:a48c19eaace4d2ff0bbdfe301d3f00d6d0fc251f9c3a47aaa6f2079d9cd7b532_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:a48c19eaace4d2ff0bbdfe301d3f00d6d0fc251f9c3a47aaa6f2079d9cd7b532_amd64 |
| Red Hat | openshift4/ovirt-csi-driver-rhel8@sha256:35c7093fe4e2cc1b573f075133596b16a866046b4a00ff43e9919ae2da68076d_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ovirt-csi-driver-rhel8@sha256:35c7093fe4e2cc1b573f075133596b16a866046b4a00ff43e9919ae2da68076d_amd64 |
| Red Hat | openshift4/ose-cluster-capi-rhel8-operator@sha256:d12a3b66b043d1701894475805b5db58fbae29428d8456e55afc20d1e76f2240_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-capi-rhel8-operator@sha256:d12a3b66b043d1701894475805b5db58fbae29428d8456e55afc20d1e76f2240_s390x |
| Red Hat | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:fc0d846e42b2c291b0d970e576891fabaa1dcfb14382665cfd512921b86220c5_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:fc0d846e42b2c291b0d970e576891fabaa1dcfb14382665cfd512921b86220c5_amd64 |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:05d92000584564be68f34a6340ccb98bcaff8375af1c0c3fd6690759125f55da_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:05d92000584564be68f34a6340ccb98bcaff8375af1c0c3fd6690759125f55da_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:0c307a537750944d7d9f53d1ddf3ed5e1c2ee100851e0363ea21d7889fdc64ee_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:0c307a537750944d7d9f53d1ddf3ed5e1c2ee100851e0363ea21d7889fdc64ee_arm64 |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:c1bfccc3f368fbc8f1d0a99cd2b34c91eae0c3eca16c6967a74cc2ef5f281ded_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-image-registry-operator@sha256:c1bfccc3f368fbc8f1d0a99cd2b34c91eae0c3eca16c6967a74cc2ef5f281ded_arm64 |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:ba4b952cd5c43052a54808cb279981b054841d499dcdb87dcae11ba4b65fb395_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-oauth-apiserver-rhel8@sha256:ba4b952cd5c43052a54808cb279981b054841d499dcdb87dcae11ba4b65fb395_amd64 |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:9299406f5fa6014474f882863b22d2160811d4cbed2a83fc4663e727cabffd04_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:9299406f5fa6014474f882863b22d2160811d4cbed2a83fc4663e727cabffd04_amd64 |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:fee8b6db0d28cc9206b9542b6104ed725fa7a2a7cf7531618a689f6cde6fda3e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-cluster-samples-operator@sha256:fa6dafe198536c31349d2aab933b8fabb039be38db89d6e341e56e28288c227e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-samples-operator@sha256:fa6dafe198536c31349d2aab933b8fabb039be38db89d6e341e56e28288c227e_arm64 |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:6485837709bb866f36c20a686e1c4dbf0049d5209c0ecbb3c59c64c271604ca0_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:6485837709bb866f36c20a686e1c4dbf0049d5209c0ecbb3c59c64c271604ca0_s390x |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:e5015878b56ce5bff149f59f227b47263d18672982f4cbcef0ea04e51a5aba93_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:e1db68114b1ecf34d6c0417cecde7ca7dcb53eae5772bab22844788236e25b0a_s390x as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-libvirt-machine-controllers@sha256:8b6ff3ef96b2c37a471ba4e4a7a9e1d663259a52fceec2c8d5250cc8e0ed9bcf_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-libvirt-machine-controllers@sha256:8b6ff3ef96b2c37a471ba4e4a7a9e1d663259a52fceec2c8d5250cc8e0ed9bcf_arm64 |
| Red Hat | openshift4/ose-image-customization-controller-rhel8@sha256:f270d18efd6bd741af13703a31b58d6d14474eef7be6535f8f07f9427564a7fe_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-image-customization-controller-rhel8@sha256:f270d18efd6bd741af13703a31b58d6d14474eef7be6535f8f07f9427564a7fe_arm64 |
| Red Hat | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:64fd02a10f5389b3798dee7a194e886f0f6b8d56fc48d44d057c166f1b322750_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:64fd02a10f5389b3798dee7a194e886f0f6b8d56fc48d44d057c166f1b322750_amd64 |
…and 1196 more
Timeline
- Jun 14, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:3542 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2100495 issue
- https://issues.redhat.com/browse/OCPBUGS-10719 advisory
- https://issues.redhat.com/browse/OCPBUGS-12750 advisory
- https://issues.redhat.com/browse/OCPBUGS-13166 advisory
- https://issues.redhat.com/browse/OCPBUGS-13661 advisory
- https://issues.redhat.com/browse/OCPBUGS-13820 advisory
- https://issues.redhat.com/browse/OCPBUGS-13916 advisory
- https://issues.redhat.com/browse/OCPBUGS-14069 advisory
- https://issues.redhat.com/browse/OCPBUGS-14288 advisory
- https://issues.redhat.com/browse/OCPBUGS-14564 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3542.json advisory
- https://access.redhat.com/security/cve/CVE-2021-38561 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-38561 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-38561 advisory
- https://pkg.go.dev/vuln/GO-2021-0113 advisory