RHSA-2023%3A3615 — Vulnetix

RHSA-2023%3A3615 PUBLISHED CVSS 5.5 MEDIUM

A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

…and 1256 more

Timeline

Jun 24, 2023 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 4, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2023:3615 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2156727 issue
https://issues.redhat.com/browse/OCPBUGS-13785 advisory
https://issues.redhat.com/browse/OCPBUGS-14333 advisory
https://issues.redhat.com/browse/OCPBUGS-14454 advisory
https://issues.redhat.com/browse/OCPBUGS-14455 advisory
https://issues.redhat.com/browse/OCPBUGS-14647 advisory
https://issues.redhat.com/browse/OCPBUGS-14671 advisory
https://issues.redhat.com/browse/OCPBUGS-14717 advisory
https://issues.redhat.com/browse/OCPBUGS-14745 advisory
https://issues.redhat.com/browse/OCPBUGS-8673 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3615.json advisory
https://access.redhat.com/security/cve/CVE-2021-4235 advisory
https://www.cve.org/CVERecord?id=CVE-2021-4235 advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 advisory
https://github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241 advisory
https://github.com/go-yaml/yaml/pull/375 advisory
https://pkg.go.dev/vuln/GO-2021-0061 advisory

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-cluster-config-operator@sha256:413db94f31dee1c11a21461373745ce4986266237610de7373756a927d549c69_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cluster-config-operator@sha256:413db94f31dee1c11a21461373745ce4986266237610de7373756a927d549c69_arm64, *
Red Hat	openshift4/ose-operator-marketplace@sha256:b1613a2d84139604a88ba3e6fecb66b5c15d93f65682fac2baab61d124c74296_s390x as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-operator-marketplace@sha256:b1613a2d84139604a88ba3e6fecb66b5c15d93f65682fac2baab61d124c74296_s390x
Red Hat	openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:9a60c7e0d1daba3fecd8294db055189dbaff661d8a5a9c9cfad88d9658765404_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*
Red Hat	openshift4/ose-ovn-kubernetes@sha256:0254ef7bc2c26538a56f4f57f140aff0d101b896b0702d76653d6ec4ad7056dd_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-ovn-kubernetes@sha256:0254ef7bc2c26538a56f4f57f140aff0d101b896b0702d76653d6ec4ad7056dd_amd64
Red Hat	openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:4db55d9f99d3772cda855f0c33b2e36e99e9226282b37113f19e4f8a2340714a_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:4db55d9f99d3772cda855f0c33b2e36e99e9226282b37113f19e4f8a2340714a_arm64
Red Hat	openshift4/ose-prometheus-operator@sha256:31935b73333aa9fbd804b66bc96c3fad9835d63790c424283019b7d9e48c0673_s390x as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-prometheus-operator@sha256:31935b73333aa9fbd804b66bc96c3fad9835d63790c424283019b7d9e48c0673_s390x, *
Red Hat	openshift4/ose-csi-livenessprobe-rhel8@sha256:417e318c4ff3fed0faba95eae5ddb14579a004da88454fbe3e702d769c7677a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-csi-livenessprobe-rhel8@sha256:417e318c4ff3fed0faba95eae5ddb14579a004da88454fbe3e702d769c7677a5_ppc64le
Red Hat	openshift4/ose-prometheus@sha256:f7ed375ebf0173b323aa76d601f5ee5651151b3af4f55e8da7795ade2ef56e7f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-prometheus@sha256:f7ed375ebf0173b323aa76d601f5ee5651151b3af4f55e8da7795ade2ef56e7f_ppc64le
Red Hat	openshift4/ose-baremetal-runtimecfg-rhel8@sha256:c14f22c02dc7381f2d6a88e1b3b0d13509219ca53e03ad135f0809bf8302f769_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-baremetal-runtimecfg-rhel8@sha256:c14f22c02dc7381f2d6a88e1b3b0d13509219ca53e03ad135f0809bf8302f769_amd64
Red Hat	openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:3fc84b22c20a6807881c525e4479174382853f1ac825a8546cc24be5a94a2959_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:3fc84b22c20a6807881c525e4479174382853f1ac825a8546cc24be5a94a2959_arm64
Red Hat	openshift4/ovirt-csi-driver-rhel8@sha256:12deccba4389580616eb39da16407db7c67245194cb70e727d85004837b5b1bd_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ovirt-csi-driver-rhel8@sha256:12deccba4389580616eb39da16407db7c67245194cb70e727d85004837b5b1bd_amd64
Red Hat	openshift4/ose-openshift-state-metrics-rhel8@sha256:86c1c063f7e81c113391e16f961aa07108888c1872e65987e175a6a578c64743_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-openshift-state-metrics-rhel8@sha256:86c1c063f7e81c113391e16f961aa07108888c1872e65987e175a6a578c64743_ppc64le, *
Red Hat	openshift4/ose-cluster-ingress-operator@sha256:217d79c84b92a2d911bf64873cdc1ee4e7918a56d6c73c00e36718abad4e1284_s390x as a component of Red Hat OpenShift Container Platform 4.12	*
Red Hat	openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:bf1883cd2f99e14da8e6248ee31330237d41f4d1802284fc6fa3eed75cdcc82c_s390x as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:bf1883cd2f99e14da8e6248ee31330237d41f4d1802284fc6fa3eed75cdcc82c_s390x
Red Hat	openshift4/ose-operator-marketplace@sha256:624dd35e0c55d9d505b61f5e7e858a442e2b63653be122265651bee194ad3ebe_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-operator-marketplace@sha256:624dd35e0c55d9d505b61f5e7e858a442e2b63653be122265651bee194ad3ebe_arm64, *
Red Hat	openshift4/ose-tests@sha256:ee01ea2600b5a05e21f86e1f007c8efdef9b4f577bfe5a9833b5b25ae94672f6_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-tests@sha256:ee01ea2600b5a05e21f86e1f007c8efdef9b4f577bfe5a9833b5b25ae94672f6_amd64
Red Hat	openshift4/ose-cluster-network-operator@sha256:bdd1bba29fb5a7be59009eb56c6402c167ad014a374c40ca2488133f1f3e2be8_s390x as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cluster-network-operator@sha256:bdd1bba29fb5a7be59009eb56c6402c167ad014a374c40ca2488133f1f3e2be8_s390x
Red Hat	openshift4/ose-kube-state-metrics@sha256:8a00c3a04e889033eb8b2a156e0c8ca7350febebb99ba8350666e4c6003d7d2f_s390x as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-kube-state-metrics@sha256:8a00c3a04e889033eb8b2a156e0c8ca7350febebb99ba8350666e4c6003d7d2f_s390x
Red Hat	openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2c0fe904199e0eabc0400d87b5442e884e51ce29258968e22294ff054cdec1d_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2c0fe904199e0eabc0400d87b5442e884e51ce29258968e22294ff054cdec1d_arm64, *
Red Hat	openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:0ffe14f002714899919aff16fdbfe542ddd7225415980e95238e1698997c2121_amd64 as a component of Red Hat OpenShift Container Platform 4.12	,