VDB

RHSA-2023%3A6817

RHSA-2023%3A6817 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/virt-exportproxy-rhel9@sha256:52918efebc898b114cb630130e019fe16a2656d1ad95f27d83e52ea7a08036df_amd64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/virt-exportproxy-rhel9@sha256:52918efebc898b114cb630130e019fe16a2656d1ad95f27d83e52ea7a08036df_amd64, *, container-native-virtualization/virt-exportproxy-rhel9@sha256:52918efebc898b114cb630130e019fe16a2656d1ad95f27d83e52ea7a08036df_amd64
Red Hatcontainer-native-virtualization/vm-network-latency-checkup-rhel9@sha256:90a3f832b1c015ed6b5463fbef1c2ecc52b99bb41240b70d859f13c416e45adb_amd64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/vm-network-latency-checkup-rhel9@sha256:90a3f832b1c015ed6b5463fbef1c2ecc52b99bb41240b70d859f13c416e45adb_amd64, *
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:2a583fb0a7b1d59f8789787d59b1a17d142024b510b5ad2a95cbac2cdbe2da8c_arm64 as a component of CNV 4.14 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:55cc13ec852d0c6819b0be7592b12460c4256f64f5fcba846e1875738868b421_amd64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:55cc13ec852d0c6819b0be7592b12460c4256f64f5fcba846e1875738868b421_amd64, container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:55cc13ec852d0c6819b0be7592b12460c4256f64f5fcba846e1875738868b421_amd64, *
Red Hatcontainer-native-virtualization/virt-handler-rhel9@sha256:63c6ef708aa0c7e939131ad891d565dfda386cbabad8ab31996686b656dc0a55_amd64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/virt-handler-rhel9@sha256:63c6ef708aa0c7e939131ad891d565dfda386cbabad8ab31996686b656dc0a55_amd64, *
Red Hatcontainer-native-virtualization/virt-operator-rhel9@sha256:162e02e3bb111ae8fbb76d6348cd5dd2d521cefdfe5dd4a97c44e0f6c26d3636_arm64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/virt-operator-rhel9@sha256:162e02e3bb111ae8fbb76d6348cd5dd2d521cefdfe5dd4a97c44e0f6c26d3636_arm64, container-native-virtualization/virt-operator-rhel9@sha256:162e02e3bb111ae8fbb76d6348cd5dd2d521cefdfe5dd4a97c44e0f6c26d3636_arm64, container-native-virtualization/virt-operator-rhel9@sha256:162e02e3bb111ae8fbb76d6348cd5dd2d521cefdfe5dd4a97c44e0f6c26d3636_arm64
Red Hatcontainer-native-virtualization/virt-cdi-operator-rhel9@sha256:f614b289dc70fd7c427816182233e3a35349df27563d2bcfedb7543b6ae24e9c_amd64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/virt-cdi-operator-rhel9@sha256:f614b289dc70fd7c427816182233e3a35349df27563d2bcfedb7543b6ae24e9c_amd64, container-native-virtualization/virt-cdi-operator-rhel9@sha256:f614b289dc70fd7c427816182233e3a35349df27563d2bcfedb7543b6ae24e9c_amd64
Red Hatcontainer-native-virtualization/kubemacpool-rhel9@sha256:0a0265375b10ff7c60397a5d486b2f48f524af9a57aa9ba7ae3775f1626fe724_arm64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/kubemacpool-rhel9@sha256:0a0265375b10ff7c60397a5d486b2f48f524af9a57aa9ba7ae3775f1626fe724_arm64, container-native-virtualization/kubemacpool-rhel9@sha256:0a0265375b10ff7c60397a5d486b2f48f524af9a57aa9ba7ae3775f1626fe724_arm64, container-native-virtualization/kubemacpool-rhel9@sha256:0a0265375b10ff7c60397a5d486b2f48f524af9a57aa9ba7ae3775f1626fe724_arm64
Red Hatcontainer-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:df49bba89e997fbd4d86d6ae199ecaa19304e99556520fab02e710d06fb77a5d_arm64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:df49bba89e997fbd4d86d6ae199ecaa19304e99556520fab02e710d06fb77a5d_arm64, *
Red Hatcontainer-native-virtualization/ovs-cni-plugin-rhel9@sha256:51ec88809134d233e965121f6dab5b2b89db10609ed6d05907d13eaf8425d40d_arm64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/ovs-cni-plugin-rhel9@sha256:51ec88809134d233e965121f6dab5b2b89db10609ed6d05907d13eaf8425d40d_arm64, *, container-native-virtualization/ovs-cni-plugin-rhel9@sha256:51ec88809134d233e965121f6dab5b2b89db10609ed6d05907d13eaf8425d40d_arm64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:ce0800b46eddaabb5a726a3e95cf2a3f415931ebc0cded71638e295de6c4c835_amd64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/virtio-win-rhel9@sha256:ce0800b46eddaabb5a726a3e95cf2a3f415931ebc0cded71638e295de6c4c835_amd64, container-native-virtualization/virtio-win-rhel9@sha256:ce0800b46eddaabb5a726a3e95cf2a3f415931ebc0cded71638e295de6c4c835_amd64, container-native-virtualization/virtio-win-rhel9@sha256:ce0800b46eddaabb5a726a3e95cf2a3f415931ebc0cded71638e295de6c4c835_amd64
Red Hatcontainer-native-virtualization/virt-api-rhel9@sha256:847c69bc5456e1a01fc9f5ae83db44d79b9e03277f2488bc22db0394940edaa0_arm64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/virt-api-rhel9@sha256:847c69bc5456e1a01fc9f5ae83db44d79b9e03277f2488bc22db0394940edaa0_arm64, container-native-virtualization/virt-api-rhel9@sha256:847c69bc5456e1a01fc9f5ae83db44d79b9e03277f2488bc22db0394940edaa0_arm64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:70a7c00ba55fb485b4f34d05b90029a15c779a3666c9026f32558a0666511b98_arm64 as a component of CNV 4.14 for RHEL 9*, *, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:70a7c00ba55fb485b4f34d05b90029a15c779a3666c9026f32558a0666511b98_arm64
Red Hatcontainer-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:8d08f900b73b9a409cc9813966ecc6c4a5674bcae247f68375aed2db5523e350_arm64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:8d08f900b73b9a409cc9813966ecc6c4a5674bcae247f68375aed2db5523e350_arm64, container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:8d08f900b73b9a409cc9813966ecc6c4a5674bcae247f68375aed2db5523e350_arm64, container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:8d08f900b73b9a409cc9813966ecc6c4a5674bcae247f68375aed2db5523e350_arm64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:f83181c96bdc3bcdc7dba03eda53e7b3a5b5fb334bae95d326707c95f8eabead_arm64 as a component of CNV 4.14 for RHEL 9*, *, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:f83181c96bdc3bcdc7dba03eda53e7b3a5b5fb334bae95d326707c95f8eabead_arm64
Red Hatcontainer-native-virtualization/libguestfs-tools-rhel9@sha256:06b9374b8ce3034068f364ec84d3410c9e662dbdcb6363dc2cfd595e2a48312c_amd64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/libguestfs-tools-rhel9@sha256:06b9374b8ce3034068f364ec84d3410c9e662dbdcb6363dc2cfd595e2a48312c_amd64, *, *
Red Hatcontainer-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:2e0bde18f05f58f896f9badfbbe3a7be5e0a4e3fbcf1df64d5e1cffdccf35c37_arm64 as a component of CNV 4.14 for RHEL 9*, *, container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:2e0bde18f05f58f896f9badfbbe3a7be5e0a4e3fbcf1df64d5e1cffdccf35c37_arm64
Red Hatcontainer-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:46d6153c2da86702d06701c5c95e36bb06df03d982771d6791c92c559664bac7_amd64 as a component of CNV 4.14 for RHEL 9container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:46d6153c2da86702d06701c5c95e36bb06df03d982771d6791c92c559664bac7_amd64, container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:46d6153c2da86702d06701c5c95e36bb06df03d982771d6791c92c559664bac7_amd64, container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:46d6153c2da86702d06701c5c95e36bb06df03d982771d6791c92c559664bac7_amd64
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:5511e156acd677d58698f1511578752ffb74da39c41773817b1a8df6bb3356dd_amd64 as a component of CNV 4.14 for RHEL 9*, container-native-virtualization/hostpath-provisioner-rhel9@sha256:5511e156acd677d58698f1511578752ffb74da39c41773817b1a8df6bb3356dd_amd64, container-native-virtualization/hostpath-provisioner-rhel9@sha256:5511e156acd677d58698f1511578752ffb74da39c41773817b1a8df6bb3356dd_amd64
Red Hatcontainer-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:f0b69c20e4d42a53d1b9a68dd90e919487d9d047d2186ad8ea217b8e29884ae9_amd64 as a component of CNV 4.14 for RHEL 9*, *, *

…and 156 more

Timeline

  • Nov 8, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jun 23, 2026 CVE Updated

References

…and 342 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›