RHSA-2023:1504 | Vulnetix

RHSA-2023:1504 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

…and 1199 more

Timeline

Apr 4, 2023 CVE Published
May 1, 2026 Distribution Patch
May 1, 2026 Security Advisory
May 15, 2026 Distribution Patch
May 15, 2026 Security Advisory
Jun 21, 2026 Security Advisory
Jun 23, 2026 CVE Updated

References

https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1504.json advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20329 advisory
https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://access.redhat.com/security/cve/CVE-2021-20329 advisory
https://www.cve.org/CVERecord?id=CVE-2021-20329 advisory
https://issues.redhat.com/browse/OCPBUGS-10671 advisory
https://issues.redhat.com/browse/OCPBUGS-10382 advisory
https://issues.redhat.com/browse/OCPBUGS-7562 advisory
https://issues.redhat.com/browse/OCPBUGS-9986 advisory
https://issues.redhat.com/browse/OCPBUGS-10772 advisory
https://issues.redhat.com/browse/OCPBUGS-2303 advisory
https://issues.redhat.com/browse/OCPBUGS-9399 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2100495 issue
https://access.redhat.com/security/cve/CVE-2021-38561 advisory
https://pkg.go.dev/vuln/GO-2021-0113 advisory
https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html advisory
https://issues.redhat.com/browse/OCPBUGS-9398 advisory
https://access.redhat.com/errata/RHSA-2023:1504 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1971033 issue

…and 5 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-cluster-network-operator@sha256:c8d5b2cb00b3e5afc297951ead1202812d9b2cd9b03a1bfda9ccfd6dbe323ff4_s390x as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-network-operator@sha256:c8d5b2cb00b3e5afc297951ead1202812d9b2cd9b03a1bfda9ccfd6dbe323ff4_s390x, openshift4/ose-cluster-network-operator@sha256:c8d5b2cb00b3e5afc297951ead1202812d9b2cd9b03a1bfda9ccfd6dbe323ff4_s390x, openshift4/ose-cluster-network-operator@sha256:c8d5b2cb00b3e5afc297951ead1202812d9b2cd9b03a1bfda9ccfd6dbe323ff4_s390x
Red Hat	openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:adcbef6ebe64304d18eeef1c8de9f0b6989d11154eece0b0b5757cd763944977_amd64 as a component of Red Hat OpenShift Container Platform 4.11	, openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:adcbef6ebe64304d18eeef1c8de9f0b6989d11154eece0b0b5757cd763944977_amd64,
Red Hat	openshift4/ose-prometheus-node-exporter@sha256:029fdb5e530eb721d0f780276c68ea47ac06d1a8df97af1e8cac2d63c6a41486_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	, , *
Red Hat	openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:4e7a75d276c0c006d4bfda455ea86cba7b6ef71fcbf1345cdfc22f378fadf114_arm64 as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:4e7a75d276c0c006d4bfda455ea86cba7b6ef71fcbf1345cdfc22f378fadf114_arm64, openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:4e7a75d276c0c006d4bfda455ea86cba7b6ef71fcbf1345cdfc22f378fadf114_arm64
Red Hat	openshift4/ose-cluster-bootstrap@sha256:13eeaf43daa84237d6bbaa6bfa58c4c1025dfe95c5fb60a4a0a5c49743bee594_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	, , *
Red Hat	openshift4/ose-oauth-server-rhel8@sha256:27069e609a9670185ec707743ac5c505fc0a1a1a986c8f4375f2fae0f4b5fce3_arm64 as a component of Red Hat OpenShift Container Platform 4.11	, openshift4/ose-oauth-server-rhel8@sha256:27069e609a9670185ec707743ac5c505fc0a1a1a986c8f4375f2fae0f4b5fce3_arm64,
Red Hat	openshift4/ose-ovn-kubernetes@sha256:8e1aaf932654249b28d29a036c5d9bffade5565760662243ef882d44ea5a80da_arm64 as a component of Red Hat OpenShift Container Platform 4.11	, , *
Red Hat	openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:86e596a0602f324a10def59520789b2f7b4bfb80500ad5bdfb94622ee35c7eb1_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:86e596a0602f324a10def59520789b2f7b4bfb80500ad5bdfb94622ee35c7eb1_ppc64le, *, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:86e596a0602f324a10def59520789b2f7b4bfb80500ad5bdfb94622ee35c7eb1_ppc64le
Red Hat	openshift4/ose-hyperkube@sha256:89c163f673ae96e87e0a16d4c2773cd70359746947929e5491e8ae154e994e21_amd64 as a component of Red Hat OpenShift Container Platform 4.11	, , *
Red Hat	openshift4/ose-kube-proxy@sha256:e33543223b0b62daddd49d3a7eeba52ef6093e7b8c36a0191e2ed64d3aec3874_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-kube-proxy@sha256:e33543223b0b62daddd49d3a7eeba52ef6093e7b8c36a0191e2ed64d3aec3874_amd64, openshift4/ose-kube-proxy@sha256:e33543223b0b62daddd49d3a7eeba52ef6093e7b8c36a0191e2ed64d3aec3874_amd64, openshift4/ose-kube-proxy@sha256:e33543223b0b62daddd49d3a7eeba52ef6093e7b8c36a0191e2ed64d3aec3874_amd64
Red Hat	openshift4/ose-telemeter@sha256:2e54d510d0263b01faf707fbb98aaeb62f46df2e81b7cdf0048a50c6bc413d12_amd64 as a component of Red Hat OpenShift Container Platform 4.11	, , *
Red Hat	openshift4/ose-operator-lifecycle-manager@sha256:f481f40e680bc4d08bc479a16d7f9e7779c9f947eceb9d9b4ebec034c0d5301f_s390x as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-operator-lifecycle-manager@sha256:f481f40e680bc4d08bc479a16d7f9e7779c9f947eceb9d9b4ebec034c0d5301f_s390x, openshift4/ose-operator-lifecycle-manager@sha256:f481f40e680bc4d08bc479a16d7f9e7779c9f947eceb9d9b4ebec034c0d5301f_s390x
Red Hat	openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:c9f5880f6c65ae6bd9b6827260b8c38550f854dc5ad216436a0064fcf8ed5e03_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:c9f5880f6c65ae6bd9b6827260b8c38550f854dc5ad216436a0064fcf8ed5e03_ppc64le, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:c9f5880f6c65ae6bd9b6827260b8c38550f854dc5ad216436a0064fcf8ed5e03_ppc64le, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:c9f5880f6c65ae6bd9b6827260b8c38550f854dc5ad216436a0064fcf8ed5e03_ppc64le
Red Hat	openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:1cea9ff7bb809f11a8ab79115021b3ac49c3ddd71c098594306e18a3f69020cd_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:1cea9ff7bb809f11a8ab79115021b3ac49c3ddd71c098594306e18a3f69020cd_arm64, ,
Red Hat	openshift4/ose-cluster-openshift-controller-manager-operator@sha256:c2ddf5a5017b473f1c08e27f4d5af59f2e42988df6d1a0b2fcabaf0fc2db268d_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-openshift-controller-manager-operator@sha256:c2ddf5a5017b473f1c08e27f4d5af59f2e42988df6d1a0b2fcabaf0fc2db268d_amd64, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:c2ddf5a5017b473f1c08e27f4d5af59f2e42988df6d1a0b2fcabaf0fc2db268d_amd64, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:c2ddf5a5017b473f1c08e27f4d5af59f2e42988df6d1a0b2fcabaf0fc2db268d_amd64
Red Hat	openshift4/ose-thanos-rhel8@sha256:0d4d07abe2357ce3e3c2744a7f010b59a56cb2168d276a174ae93daff0f44cc3_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-thanos-rhel8@sha256:0d4d07abe2357ce3e3c2744a7f010b59a56cb2168d276a174ae93daff0f44cc3_arm64, openshift4/ose-thanos-rhel8@sha256:0d4d07abe2357ce3e3c2744a7f010b59a56cb2168d276a174ae93daff0f44cc3_arm64, openshift4/ose-thanos-rhel8@sha256:0d4d07abe2357ce3e3c2744a7f010b59a56cb2168d276a174ae93daff0f44cc3_arm64
Red Hat	openshift4/ose-cluster-kube-scheduler-operator@sha256:44b1684493c3fedf17da3943622c45bd10ef7b42c1e3f98164bdff7a876c5ea2_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-kube-scheduler-operator@sha256:44b1684493c3fedf17da3943622c45bd10ef7b42c1e3f98164bdff7a876c5ea2_amd64, openshift4/ose-cluster-kube-scheduler-operator@sha256:44b1684493c3fedf17da3943622c45bd10ef7b42c1e3f98164bdff7a876c5ea2_amd64, openshift4/ose-cluster-kube-scheduler-operator@sha256:44b1684493c3fedf17da3943622c45bd10ef7b42c1e3f98164bdff7a876c5ea2_amd64
Red Hat	openshift4/ose-cluster-kube-scheduler-operator@sha256:5b3fdd2b577b7e531b3c725caed544a7f181bf41ca97824f097878a7fdf7b2f2_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-kube-scheduler-operator@sha256:5b3fdd2b577b7e531b3c725caed544a7f181bf41ca97824f097878a7fdf7b2f2_arm64, *, openshift4/ose-cluster-kube-scheduler-operator@sha256:5b3fdd2b577b7e531b3c725caed544a7f181bf41ca97824f097878a7fdf7b2f2_arm64
Red Hat	openshift4/ose-machine-api-provider-openstack-rhel8@sha256:938d28a388c135e5ecf0608d1cf831acea6e1eb919500c6f9e6889d637aa2713_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-machine-api-provider-openstack-rhel8@sha256:938d28a388c135e5ecf0608d1cf831acea6e1eb919500c6f9e6889d637aa2713_amd64, openshift4/ose-machine-api-provider-openstack-rhel8@sha256:938d28a388c135e5ecf0608d1cf831acea6e1eb919500c6f9e6889d637aa2713_amd64, openshift4/ose-machine-api-provider-openstack-rhel8@sha256:938d28a388c135e5ecf0608d1cf831acea6e1eb919500c6f9e6889d637aa2713_amd64
Red Hat	openshift4/ose-ovirt-machine-controllers-rhel8@sha256:0217b32a456a85d4f889ab910196b77888f65d86e4523146927911b28f420345_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-ovirt-machine-controllers-rhel8@sha256:0217b32a456a85d4f889ab910196b77888f65d86e4523146927911b28f420345_arm64, ,