VDB
RHSA-2023:1656
RHSA-2023:1656
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-openshift-apiserver-operator@sha256:61ce2c9e4e555f3f182b73959f7425e84f757b5b97da9a4555b26ce68355a550_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-openshift-apiserver-operator@sha256:61ce2c9e4e555f3f182b73959f7425e84f757b5b97da9a4555b26ce68355a550_amd64, openshift4/ose-cluster-openshift-apiserver-operator@sha256:61ce2c9e4e555f3f182b73959f7425e84f757b5b97da9a4555b26ce68355a550_amd64 |
| Red Hat | openshift4/ose-console@sha256:ae23ca2b0cd2e6b0281541f837bf24cc76b58cccb33688e33cf762562330d862_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-console@sha256:ae23ca2b0cd2e6b0281541f837bf24cc76b58cccb33688e33cf762562330d862_s390x, openshift4/ose-console@sha256:ae23ca2b0cd2e6b0281541f837bf24cc76b58cccb33688e33cf762562330d862_s390x, openshift4/ose-console@sha256:ae23ca2b0cd2e6b0281541f837bf24cc76b58cccb33688e33cf762562330d862_s390x |
| Red Hat | openshift4/ose-grafana@sha256:e655ec1552a120161d8a4bfa6aa07fec95724944922c385574428879834f604c_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-grafana@sha256:e655ec1552a120161d8a4bfa6aa07fec95724944922c385574428879834f604c_amd64, openshift4/ose-grafana@sha256:e655ec1552a120161d8a4bfa6aa07fec95724944922c385574428879834f604c_amd64, openshift4/ose-grafana@sha256:e655ec1552a120161d8a4bfa6aa07fec95724944922c385574428879834f604c_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner@sha256:4eb015899a8bf68301be49de20db83959709d847eb16ac6cf5107c403283a911_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-csi-external-provisioner@sha256:4eb015899a8bf68301be49de20db83959709d847eb16ac6cf5107c403283a911_s390x, openshift4/ose-csi-external-provisioner@sha256:4eb015899a8bf68301be49de20db83959709d847eb16ac6cf5107c403283a911_s390x |
| Red Hat | openshift4/ovirt-csi-driver-rhel8-operator@sha256:6125287480c9bd66913c5e0379c2943d99588ebdd49d4011a2e93511cf3b1ae7_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, *, openshift4/ovirt-csi-driver-rhel8-operator@sha256:6125287480c9bd66913c5e0379c2943d99588ebdd49d4011a2e93511cf3b1ae7_ppc64le |
| Red Hat | openshift4/ose-prometheus-config-reloader@sha256:21733bf29308d98ab0da5be1f8073ddddf095d96ed01762976e7b21f2e390ad8_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-prometheus-config-reloader@sha256:21733bf29308d98ab0da5be1f8073ddddf095d96ed01762976e7b21f2e390ad8_amd64, * |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:ee484b7d28e34a05a70da29772572d172c06cacfe089ab896b06d681d7fab35d_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-sdn-rhel8@sha256:ee484b7d28e34a05a70da29772572d172c06cacfe089ab896b06d681d7fab35d_arm64, openshift4/ose-sdn-rhel8@sha256:ee484b7d28e34a05a70da29772572d172c06cacfe089ab896b06d681d7fab35d_arm64, openshift4/ose-sdn-rhel8@sha256:ee484b7d28e34a05a70da29772572d172c06cacfe089ab896b06d681d7fab35d_arm64 |
| Red Hat | openshift4/ose-baremetal-rhel8-operator@sha256:919deebb72c6186aec85472584b891771dd48fdd9e52afc8e24a2e07b2633867_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-baremetal-rhel8-operator@sha256:919deebb72c6186aec85472584b891771dd48fdd9e52afc8e24a2e07b2633867_arm64, openshift4/ose-baremetal-rhel8-operator@sha256:919deebb72c6186aec85472584b891771dd48fdd9e52afc8e24a2e07b2633867_arm64, openshift4/ose-baremetal-rhel8-operator@sha256:919deebb72c6186aec85472584b891771dd48fdd9e52afc8e24a2e07b2633867_arm64 |
| Red Hat | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:6b38c594513ab3f762c6623a7cad1984488be409b35dde50b700f78761603f9f_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:6b38c594513ab3f762c6623a7cad1984488be409b35dde50b700f78761603f9f_s390x, openshift4/ose-csi-node-driver-registrar-rhel8@sha256:6b38c594513ab3f762c6623a7cad1984488be409b35dde50b700f78761603f9f_s390x, openshift4/ose-csi-node-driver-registrar-rhel8@sha256:6b38c594513ab3f762c6623a7cad1984488be409b35dde50b700f78761603f9f_s390x |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:fed09a862a3c6d29d05f370b5b57e27303d26b96a5cc2be53661172b872503fb_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-autoscaler-operator@sha256:fed09a862a3c6d29d05f370b5b57e27303d26b96a5cc2be53661172b872503fb_arm64, openshift4/ose-cluster-autoscaler-operator@sha256:fed09a862a3c6d29d05f370b5b57e27303d26b96a5cc2be53661172b872503fb_arm64, openshift4/ose-cluster-autoscaler-operator@sha256:fed09a862a3c6d29d05f370b5b57e27303d26b96a5cc2be53661172b872503fb_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:a8ebb64348caec7dc8ebd64a6b3fd32d06d6d9125bcf21074a83b4a2184e7757_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-tools-rhel8@sha256:a8ebb64348caec7dc8ebd64a6b3fd32d06d6d9125bcf21074a83b4a2184e7757_ppc64le, openshift4/ose-tools-rhel8@sha256:a8ebb64348caec7dc8ebd64a6b3fd32d06d6d9125bcf21074a83b4a2184e7757_ppc64le, openshift4/ose-tools-rhel8@sha256:a8ebb64348caec7dc8ebd64a6b3fd32d06d6d9125bcf21074a83b4a2184e7757_ppc64le |
| Red Hat | openshift4/ovirt-csi-driver-rhel8-operator@sha256:5f47f398367e48916a76d4920bc0f27da435db61e95c72a20316845af8658d9b_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ovirt-csi-driver-rhel8-operator@sha256:5f47f398367e48916a76d4920bc0f27da435db61e95c72a20316845af8658d9b_amd64, *, openshift4/ovirt-csi-driver-rhel8-operator@sha256:5f47f398367e48916a76d4920bc0f27da435db61e95c72a20316845af8658d9b_amd64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:799e4cb8807ef41f0fd762e8420909b32e6f084d3b6bc502c4c12be0eb421f61_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, *, * |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:b68c0d5de018fd009a78c5808772c523a8e0f8e8ea2255ff36e0b2bc30e9b18e_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-config-operator@sha256:b68c0d5de018fd009a78c5808772c523a8e0f8e8ea2255ff36e0b2bc30e9b18e_s390x, *, * |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:a82121d441f70768cac4c7d9b50456d74b3705b88198a5386f6b10f1cb8e7092_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-kube-controller-manager-operator@sha256:a82121d441f70768cac4c7d9b50456d74b3705b88198a5386f6b10f1cb8e7092_arm64, openshift4/ose-cluster-kube-controller-manager-operator@sha256:a82121d441f70768cac4c7d9b50456d74b3705b88198a5386f6b10f1cb8e7092_arm64 |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:11257d2ef6894e1f801b5af4bfb6b2cfee7908d7126c642885e3e4655226eb5b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-oauth-apiserver-rhel8@sha256:11257d2ef6894e1f801b5af4bfb6b2cfee7908d7126c642885e3e4655226eb5b_ppc64le, openshift4/ose-oauth-apiserver-rhel8@sha256:11257d2ef6894e1f801b5af4bfb6b2cfee7908d7126c642885e3e4655226eb5b_ppc64le |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:bc2e31cb3bdcb8192637e40b110e724a985f2cd33630fbec416e5b9f8cf5711c_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-baremetal-installer-rhel8@sha256:bc2e31cb3bdcb8192637e40b110e724a985f2cd33630fbec416e5b9f8cf5711c_ppc64le, openshift4/ose-baremetal-installer-rhel8@sha256:bc2e31cb3bdcb8192637e40b110e724a985f2cd33630fbec416e5b9f8cf5711c_ppc64le |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:11257d2ef6894e1f801b5af4bfb6b2cfee7908d7126c642885e3e4655226eb5b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:41b8efc4e5a12def99a4dbd18b714c4cba55ac8b9bb62339b683271367109699_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:41b8efc4e5a12def99a4dbd18b714c4cba55ac8b9bb62339b683271367109699_arm64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:41b8efc4e5a12def99a4dbd18b714c4cba55ac8b9bb62339b683271367109699_arm64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:41b8efc4e5a12def99a4dbd18b714c4cba55ac8b9bb62339b683271367109699_arm64 |
| Red Hat | openshift4/ose-cli-alt-rhel8@sha256:0cddc8c00803dd00c9f878328589a6acdce417a9fe96104f98232cbcd0d06a1a_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cli-alt-rhel8@sha256:0cddc8c00803dd00c9f878328589a6acdce417a9fe96104f98232cbcd0d06a1a_s390x, *, openshift4/ose-cli-alt-rhel8@sha256:0cddc8c00803dd00c9f878328589a6acdce417a9fe96104f98232cbcd0d06a1a_s390x |
…and 1118 more
Timeline
- Apr 12, 2023 CVE Published
- May 1, 2026 Distribution Patch
- May 16, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
- Jul 25, 2026 Distribution Patch
- Jul 25, 2026 Security Advisory
References
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://issues.redhat.com/browse/OCPBUGS-10777 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1656.json advisory
- https://issues.redhat.com/browse/OCPBUGS-10524 advisory
- https://access.redhat.com/errata/RHSA-2023:1656 advisory
- https://github.com/advisories/GHSA-f6mq-5m25-4r72 advisory
- https://access.redhat.com/articles/11258 advisory
- https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1 advisory
- https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html advisory
- https://issues.redhat.com/browse/OCPBUGS-10814 advisory
- https://issues.redhat.com/browse/OCPBUGS-11236 advisory
- https://issues.redhat.com/browse/OCPBUGS-10703 advisory
- https://issues.redhat.com/browse/OCPBUGS-8314 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1971033 issue
- https://issues.redhat.com/browse/OCPBUGS-10750 advisory
- https://access.redhat.com/security/cve/CVE-2021-20329 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-20329 advisory
- https://issues.redhat.com/browse/OCPBUGS-10491 advisory
- https://issues.redhat.com/browse/OCPBUGS-11238 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-20329 advisory