RHSA-2024%3A0193 — Vulnetix

RHSA-2024%3A0193 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

…and 117 more

Timeline

Jan 17, 2024 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Jun 23, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:0193 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1971033 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
https://issues.redhat.com/browse/OCPBUGS-19658 advisory
https://issues.redhat.com/browse/OCPBUGS-23483 advisory
https://issues.redhat.com/browse/OCPBUGS-25988 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0193.json advisory
https://access.redhat.com/security/cve/CVE-2021-20329 advisory
https://www.cve.org/CVERecord?id=CVE-2021-20329 advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20329 advisory
https://github.com/advisories/GHSA-f6mq-5m25-4r72 advisory
https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1 advisory
https://access.redhat.com/security/cve/CVE-2023-39325 advisory
https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
https://www.cve.org/CVERecord?id=CVE-2023-39325 advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-39325 advisory
https://access.redhat.com/security/cve/CVE-2023-44487 advisory
https://go.dev/issue/63417 advisory
https://pkg.go.dev/vuln/GO-2023-2102 advisory

…and 1 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/network-tools-rhel8@sha256:473cce3ee81558458beb6778df4fad6024a75ff3ce212fbc9848d30732bfe0dd_s390x as a component of Red Hat OpenShift Container Platform 4.13	openshift4/network-tools-rhel8@sha256:473cce3ee81558458beb6778df4fad6024a75ff3ce212fbc9848d30732bfe0dd_s390x, *, openshift4/network-tools-rhel8@sha256:473cce3ee81558458beb6778df4fad6024a75ff3ce212fbc9848d30732bfe0dd_s390x
Red Hat	openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:7a895374b2289119947ac54b49c34c2abd44e7f108411b65a0181e9965d5205f_amd64 as a component of Red Hat OpenShift Container Platform 4.13	, , *
Red Hat	openshift4/ose-tools-rhel8@sha256:b21c1ec26ab2065396b220132715b383d86974941a9f7c59d079aaf16cfb24db_amd64 as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-tools-rhel8@sha256:b21c1ec26ab2065396b220132715b383d86974941a9f7c59d079aaf16cfb24db_amd64, openshift4/ose-tools-rhel8@sha256:b21c1ec26ab2065396b220132715b383d86974941a9f7c59d079aaf16cfb24db_amd64, openshift4/ose-tools-rhel8@sha256:b21c1ec26ab2065396b220132715b383d86974941a9f7c59d079aaf16cfb24db_amd64
Red Hat	openshift4/ose-hyperkube@sha256:474953b990b02f9f7141ef2316e6e4dfb654fa970be893bb11b0be4a6651003a_s390x as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-hyperkube@sha256:474953b990b02f9f7141ef2316e6e4dfb654fa970be893bb11b0be4a6651003a_s390x, openshift4/ose-hyperkube@sha256:474953b990b02f9f7141ef2316e6e4dfb654fa970be893bb11b0be4a6651003a_s390x, openshift4/ose-hyperkube@sha256:474953b990b02f9f7141ef2316e6e4dfb654fa970be893bb11b0be4a6651003a_s390x
Red Hat	openshift4/driver-toolkit-rhel9@sha256:fbe0e1f721cbc7db4f46191f2e96cd3e439d4de6af3e4c3656e90b32d6cb2da2_arm64 as a component of Red Hat OpenShift Container Platform 4.13	, , openshift4/driver-toolkit-rhel9@sha256:fbe0e1f721cbc7db4f46191f2e96cd3e439d4de6af3e4c3656e90b32d6cb2da2_arm64
Red Hat	openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5e727715cdf8d52c95302d34bd6cd6bed6e22b48a1a77a060f264df30653b06f_arm64 as a component of Red Hat OpenShift Container Platform 4.13	*, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5e727715cdf8d52c95302d34bd6cd6bed6e22b48a1a77a060f264df30653b06f_arm64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5e727715cdf8d52c95302d34bd6cd6bed6e22b48a1a77a060f264df30653b06f_arm64
Red Hat	rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_s390x as a component of Red Hat OpenShift Container Platform 4.13	*, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_s390x, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_s390x
Red Hat	openshift4/ose-tests@sha256:7c4bd099e226d7bcaa446be037ba63ed0a58076c6cc428ad61160bea3d0b2304_s390x as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-tests@sha256:7c4bd099e226d7bcaa446be037ba63ed0a58076c6cc428ad61160bea3d0b2304_s390x, ,
Red Hat	rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_aarch64 as a component of Red Hat OpenShift Container Platform 4.13	rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_aarch64, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_aarch64, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_aarch64
Red Hat	openshift4/driver-toolkit-rhel9@sha256:f83f933fe00b8434456d7924e07f07a82ae38991270945fe96770982bdc414e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.13	*, openshift4/driver-toolkit-rhel9@sha256:f83f933fe00b8434456d7924e07f07a82ae38991270945fe96770982bdc414e7_ppc64le, openshift4/driver-toolkit-rhel9@sha256:f83f933fe00b8434456d7924e07f07a82ae38991270945fe96770982bdc414e7_ppc64le
Red Hat	openshift4/ose-ovn-kubernetes@sha256:afe287daf5bbcc2762d326a84bcf712c2f3818fb88a0f72cb2dbebcbb453c209_amd64 as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-ovn-kubernetes@sha256:afe287daf5bbcc2762d326a84bcf712c2f3818fb88a0f72cb2dbebcbb453c209_amd64, openshift4/ose-ovn-kubernetes@sha256:afe287daf5bbcc2762d326a84bcf712c2f3818fb88a0f72cb2dbebcbb453c209_amd64, *
Red Hat	openshift4/ose-operator-registry@sha256:8955d2f48b0d837431f46a7d7a91f3217f3ce535c1d4b4cc81c22970cf0f05e6_arm64 as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-operator-registry@sha256:8955d2f48b0d837431f46a7d7a91f3217f3ce535c1d4b4cc81c22970cf0f05e6_arm64, openshift4/ose-operator-registry@sha256:8955d2f48b0d837431f46a7d7a91f3217f3ce535c1d4b4cc81c22970cf0f05e6_arm64, *
Red Hat	rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_x86_64 as a component of Red Hat OpenShift Container Platform 4.13	rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_x86_64, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_x86_64, rhcos@sha256:af70251d6a466e43525f3ef4ba5ffa9d553b4dc4240beb5a83538c87b2a657ad_x86_64
Red Hat	openshift4/ose-operator-lifecycle-manager@sha256:00754781fdba3e206ac7187543c0c0833afdb8e765551a0316d7a66e8391e50f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13	*, openshift4/ose-operator-lifecycle-manager@sha256:00754781fdba3e206ac7187543c0c0833afdb8e765551a0316d7a66e8391e50f_ppc64le, openshift4/ose-operator-lifecycle-manager@sha256:00754781fdba3e206ac7187543c0c0833afdb8e765551a0316d7a66e8391e50f_ppc64le
Red Hat	openshift4/ose-machine-config-operator@sha256:b1207de1db941794219f728c3920b1b432113628d2e8fd2cc8f1b65598ff3082_arm64 as a component of Red Hat OpenShift Container Platform 4.13	, , *
Red Hat	openshift4/network-tools-rhel8@sha256:c401686e9a0c234f590cb505372ba94302b9a0e0b73867e39a0e12426ca6e6ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.13	, , openshift4/network-tools-rhel8@sha256:c401686e9a0c234f590cb505372ba94302b9a0e0b73867e39a0e12426ca6e6ff_ppc64le
Red Hat	openshift4/ose-machine-config-operator@sha256:6445f27aac98ae77b4ae47e92cd44cdf69f92dae51e0cbdd4b1625c7e2188f9c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-machine-config-operator@sha256:6445f27aac98ae77b4ae47e92cd44cdf69f92dae51e0cbdd4b1625c7e2188f9c_ppc64le, openshift4/ose-machine-config-operator@sha256:6445f27aac98ae77b4ae47e92cd44cdf69f92dae51e0cbdd4b1625c7e2188f9c_ppc64le, openshift4/ose-machine-config-operator@sha256:6445f27aac98ae77b4ae47e92cd44cdf69f92dae51e0cbdd4b1625c7e2188f9c_ppc64le
Red Hat	openshift4/ose-ovn-kubernetes-rhel9@sha256:b1e9a7c0a5bc4645fc33c404732927bf288505b675c91ec8e4d2a06798630dc3_ppc64le as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-ovn-kubernetes-rhel9@sha256:b1e9a7c0a5bc4645fc33c404732927bf288505b675c91ec8e4d2a06798630dc3_ppc64le, *, openshift4/ose-ovn-kubernetes-rhel9@sha256:b1e9a7c0a5bc4645fc33c404732927bf288505b675c91ec8e4d2a06798630dc3_ppc64le
Red Hat	openshift4/ose-pod@sha256:a8cbaef00c8a839000e49c55843474ef5020cc7ab2cf6aa2d10d05b8cf3fdd0a_arm64 as a component of Red Hat OpenShift Container Platform 4.13	openshift4/ose-pod@sha256:a8cbaef00c8a839000e49c55843474ef5020cc7ab2cf6aa2d10d05b8cf3fdd0a_arm64, openshift4/ose-pod@sha256:a8cbaef00c8a839000e49c55843474ef5020cc7ab2cf6aa2d10d05b8cf3fdd0a_arm64, openshift4/ose-pod@sha256:a8cbaef00c8a839000e49c55843474ef5020cc7ab2cf6aa2d10d05b8cf3fdd0a_arm64
Red Hat	openshift4/network-tools-rhel8@sha256:db1d60dd61f746fdc09a73c6520a2e32590bfbd22417f8d379d6a72a3b7505b7_amd64 as a component of Red Hat OpenShift Container Platform 4.13	*, openshift4/network-tools-rhel8@sha256:db1d60dd61f746fdc09a73c6520a2e32590bfbd22417f8d379d6a72a3b7505b7_amd64, openshift4/network-tools-rhel8@sha256:db1d60dd61f746fdc09a73c6520a2e32590bfbd22417f8d379d6a72a3b7505b7_amd64