Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:4103
HistoryNov 02, 2021 - 1:25 p.m.

(RHSA-2021:4103) Moderate: OpenShift Virtualization 4.9.0 RPMs security and bug fix update

2021-11-0213:25:34
access.redhat.com
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.054 Low

EPSS

Percentile

93.1%

JSON

OpenShift Virtualization is Red Hat’s virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains OpenShift Virtualization 4.9.0 RPMs.

Security Fix(es):

  • golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  • golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (CVE-2020-16845)

  • golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

  • golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

nessus 55
redhat 15
debian 3
osv 19
openvas 26
mageia 1
ibm 18
fedora 6
oraclelinux 4
suse 5
veracode 3
alpinelinux 3
cve 3
redhatcve 3
debiancve 3
gitlab 2
altlinux 4
amazon 4
cbl_mariner 3
github 2
wolfi 1
prion 3
f5 1
freebsd 2
ubuntucve 3
cgr 1
cloudfoundry 1
photon 3
ubuntu 2
nessus
nessus
Debian DSA-4848-1 : golang-1.11 - security update
2021-02-10 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.9 packages and (RHSA-2021:1366)
2021-05-05 00:00:00
RHEL 8 : Red Hat OpenShift Service Mesh 1.1.11 (RHSA-2020:5649)
2020-12-22 00:00:00
redhat
redhat
(RHSA-2021:1366) Moderate: OpenShift Container Platform 4.7.9 packages and security update
2021-05-04 19:16:05
(RHSA-2020:5119) Moderate: OpenShift Container Platform 4.5.20 packages and golang security update
2020-11-24 11:38:30
(RHSA-2021:0713) Low: OpenShift Container Platform 4.5.34 packages and security update
2021-03-11 04:33:08
debian
debian
[SECURITY] [DSA 4848-1] golang-1.11 security update
2021-02-08 21:24:09
[SECURITY] [DLA 2459-1] golang-1.7 security update
2020-11-21 16:15:56
[SECURITY] [DLA 2460-1] golang-1.8 security update
2020-11-21 16:41:04
osv
osv
golang-1.7 - security update
2020-11-21 00:00:00
golang-1.11 - security update
2021-02-08 00:00:00
golang-1.8 - security update
2020-11-21 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4848-1)
2021-02-10 00:00:00
Mageia: Security Advisory (MGASA-2020-0325)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2020-2247)
2020-10-30 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2020-08-18 20:41:27
ibm
ibm
Security Bulletin: IBM Cloud Pak for Integration Operators affected by multiple vulnerabilities
2020-10-02 13:03:47
Security Bulletin: Upgrade to IBP v2.5.1 to address recent concerns/issues with Golang versions other than 1.14.7
2020-12-04 16:07:39
Security Bulletin: A security vulnerability in Golang GO affects IBM Cloud Automation Manager
2021-09-16 17:57:25
fedora
fedora
[SECURITY] Fedora 32 Update: golang-1.14.7-1.fc32
2020-09-07 17:14:54
[SECURITY] Fedora 33 Update: golang-1.15.12-1.fc33
2021-05-19 01:31:16
[SECURITY] Fedora 34 Update: golang-1.16.4-1.fc34
2021-06-22 01:01:50
oraclelinux
oraclelinux
go-toolset:ol8 security update
2020-09-11 00:00:00
kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update
2020-08-24 00:00:00
olcne conmon coredns cri-o cri-tools etcd flannel grafana helm istio kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard prometheus yq security update
2020-08-31 00:00:00
suse
suse
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.15 (moderate)
2021-06-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-07-17 06:00:32
Stack Overflow
2021-05-09 02:20:52
Denial Of Service (DoS)
2020-08-13 04:32:40
alpinelinux
alpinelinux
CVE-2020-15586
2020-07-17 16:15:00
CVE-2021-31525
2021-05-27 13:15:00
CVE-2020-16845
2020-08-06 18:15:00
cve
cve
CVE-2020-15586
2020-07-17 16:15:00
CVE-2021-31525
2021-05-27 13:15:00
CVE-2020-16845
2020-08-06 18:15:00
redhatcve
redhatcve
CVE-2020-15586
2021-08-15 06:10:24
CVE-2021-31525
2021-05-11 20:55:42
CVE-2020-16845
2022-05-14 11:32:38
debiancve
debiancve
CVE-2020-15586
2020-07-17 16:15:00
CVE-2021-31525
2021-05-27 13:15:00
CVE-2020-16845
2020-08-06 18:15:00
gitlab
gitlab
Uncontrolled Recursion
2022-05-24 00:00:00
Uncontrolled Recursion
2022-05-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package golang version 1.15.12-alt1
2021-05-11 00:00:00
Security fix for the ALT Linux 10 package golang version 1.16.4-alt1
2021-05-06 00:00:00
Security fix for the ALT Linux 10 package golang version 1.14.7-alt1
2020-08-10 00:00:00
amazon
amazon
Medium: golang
2021-06-16 20:37:00
Medium: golang
2021-07-08 18:38:00
Medium: golang
2020-08-18 20:23:00
cbl_mariner
cbl_mariner
CVE-2021-31525 affecting package golang 1.15.11-1
2021-07-08 21:56:48
CVE-2020-15586 affecting package golang 1.13.11-
2021-07-08 21:56:48
CVE-2020-16845 affecting package golang 1.13.11-
2021-07-08 21:56:48
github
github
golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
2022-05-24 19:03:29
Infinite loop in xz
2021-12-16 19:16:40
wolfi
wolfi
CVE-2021-31525 vulnerabilities
2024-04-25 03:15:35
prion
prion
Code injection
2021-05-27 13:15:00
Design/Logic Flaw
2020-07-17 16:15:00
Design/Logic Flaw
2020-08-06 18:15:00
f5
f5
K55518036 : GO vulnerability CVE-2021-31525
2021-11-03 00:00:00
freebsd
freebsd
go -- net/http: ReadRequest can stack overflow due to recursion with very large headers
2021-04-22 00:00:00
go -- encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs
2020-08-06 00:00:00
ubuntucve
ubuntucve
CVE-2021-31525
2021-05-27 00:00:00
CVE-2020-15586
2020-07-17 00:00:00
CVE-2020-16845
2020-08-06 00:00:00
cgr
cgr
CVE-2021-31525 vulnerabilities
2024-04-25 03:20:40
cloudfoundry
cloudfoundry
CVE-2020-15586: Gorouter is vulnerable to DoS Attack via Expect: 100-continue requests | Cloud Foundry
2020-07-15 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0276
2021-07-29 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0276
2020-08-25 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0316
2020-08-25 00:00:00
ubuntu
ubuntu
Go vulnerability
2023-05-23 00:00:00
Go vulnerability
2022-11-15 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.054 Low

EPSS

Percentile

93.1%

JSON
Related for RHSA-2021:4103
nessus55redhat15debian3osv19openvas26mageia1ibm18fedora6oraclelinux4suse5veracode3alpinelinux3cve3redhatcve3debiancve3gitlab2altlinux4amazon4cbl_mariner3github2wolfi1prion3f51freebsd2ubuntucve3cgr1cloudfoundry1photon3ubuntu2