Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:4722
HistoryNov 17, 2021 - 3:28 p.m.

(RHSA-2021:4722) Moderate: OpenShift Virtualization 2.6.8 RPMs security and bug fix update

2021-11-1715:28:43
access.redhat.com
15

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.7%

JSON

OpenShift Virtualization is Red Hat’s virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains OpenShift Virtualization 2.6.8 RPMs.

Security Fix(es):

  • golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923)

  • golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

nessus 50
redhat 48
almalinux 4
osv 10
prion 2
veracode 2
alpinelinux 2
cve 2
ibm 25
cbl_mariner 2
debiancve 2
ubuntucve 2
oraclelinux 4
rocky 3
redhatcve 2
cnvd 1
suse 4
fedora 10
githubexploit 1
freebsd 1
altlinux 2
archlinux 1
photon 6
amazon 2
mageia 2
gentoo 1
oracle 2
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2 (golang-github-vbatts-tar-split) (RHSA-2022:0998)
2022-03-24 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1 (golang-github-vbatts-tar-split) (RHSA-2022:0988)
2022-03-25 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1 (etcd) (RHSA-2022:0260)
2022-01-26 00:00:00
redhat
redhat
(RHSA-2022:0998) Moderate: Red Hat OpenStack Platform 16.2 (golang-github-vbatts-tar-split) security update
2022-03-23 20:19:30
(RHSA-2022:0988) Moderate: Red Hat OpenStack Platform 16.1 (golang-github-vbatts-tar-split) security update
2022-03-24 09:39:07
(RHSA-2022:0260) Important: Red Hat OpenStack Platform 16.1 (etcd) security update
2022-01-25 13:47:55
almalinux
almalinux
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
Moderate: go-toolset:rhel8 security, bug fix, and enhancement update
2021-08-10 12:00:58
Moderate: grafana security, bug fix, and enhancement update
2021-11-09 08:46:47
osv
osv
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
BIT-golang-2021-29923
2024-03-06 11:06:07
CVE-2021-29923
2021-08-07 17:15:07
prion
prion
Improper access control
2021-08-07 17:15:00
Sql injection
2021-07-15 14:15:00
veracode
veracode
Privilege Escalation
2021-08-10 06:24:31
Denial Of Service (DoS)
2021-07-14 08:50:21
alpinelinux
alpinelinux
CVE-2021-29923
2021-08-07 17:15:00
CVE-2021-34558
2021-07-15 14:15:00
cve
cve
CVE-2021-29923
2021-08-07 17:15:00
CVE-2021-34558
2021-07-15 14:15:00
ibm
ibm
Security Bulletin: A vulnerability in Golang Go affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-29923)
2023-01-12 21:59:00
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-29923)
2022-04-22 18:50:57
Security Bulletin: IBM App Connect Enterprise Certified Container Integration Servers may be vulnerable to bypassing of access control based on IP addresses due to CVE-2021-29923
2021-10-20 10:09:43
cbl_mariner
cbl_mariner
CVE-2021-29923 affecting package golang 1.16.15-2
2021-09-09 15:03:05
CVE-2021-34558 affecting package golang 1.15.13-1
2021-09-09 15:03:05
debiancve
debiancve
CVE-2021-29923
2021-08-07 17:15:00
CVE-2021-34558
2021-07-15 14:15:00
ubuntucve
ubuntucve
CVE-2021-29923
2021-08-07 00:00:00
CVE-2021-34558
2021-07-15 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security update
2021-09-22 00:00:00
go-toolset:ol8 security, bug fix, and enhancement update
2021-08-12 00:00:00
grafana security, bug fix, and enhancement update
2021-11-16 00:00:00
rocky
rocky
go-toolset:rhel8 security update
2021-09-21 07:12:48
go-toolset:rhel8 security, bug fix, and enhancement update
2021-08-10 12:00:58
grafana security, bug fix, and enhancement update
2021-11-09 08:46:47
redhatcve
redhatcve
CVE-2021-29923
2022-05-07 13:54:34
CVE-2021-34558
2022-05-07 14:27:24
cnvd
cnvd
Google Golang Trust Management Issue Vulnerability
2021-07-19 00:00:00
suse
suse
Security update for go1.16 (important)
2021-07-22 00:00:00
Security update for go1.15 (moderate)
2021-07-23 00:00:00
Security update for go1.16 (important)
2021-07-19 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: podman-3.2.3-2.fc33
2021-08-11 01:07:26
[SECURITY] Fedora 34 Update: grafana-7.5.10-1.fc34
2021-10-10 03:04:17
[SECURITY] Fedora 34 Update: golang-1.16.6-1.fc34
2021-07-28 01:24:52
githubexploit
githubexploit
Exploit for Improper Certificate Validation in Golang Go
2021-07-13 06:15:21
freebsd
freebsd
go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters
2021-07-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.16.6-alt1
2021-07-13 00:00:00
Security fix for the ALT Linux 9 package golang version 1.15.14-alt1
2021-07-13 00:00:00
archlinux
archlinux
[ASA-202107-42] go: denial of service
2021-07-20 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0294
2021-09-02 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0294
2021-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2021-0130
2021-11-29 00:00:00
amazon
amazon
Medium: golang
2021-08-04 20:32:00
Medium: golang
2021-09-02 22:54:00
mageia
mageia
Updated golang packages fix security vulnerabilities
2021-07-25 11:34:17
Updated skopeo/buildah/podman packages fix security vulnerability
2023-07-07 08:54:45
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-08-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.7%

JSON
Related for RHSA-2021:4722
nessus50redhat48almalinux4osv10prion2veracode2alpinelinux2cve2ibm25cbl_mariner2debiancve2ubuntucve2oraclelinux4rocky3redhatcve2cnvd1suse4fedora10githubexploit1freebsd1altlinux2archlinux1photon6amazon2mageia2gentoo1oracle2