Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Go | Golang | * | 1.14.12 (excluding) |
| Go | Golang | 1.15 (including) | 1.15.5 (excluding) |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/client-kn-rhel8:0.18.4-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-controller-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-mtping-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-storage-version-migration-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-sugar-controller-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/eventing-webhook-rhel8:0.18.6-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/ingress-rhel8-operator:1.12.0-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/knative-rhel8-operator:1.12.0-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/kn-cli-artifacts-rhel8:0.18.4-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/kourier-control-rhel8:0.18.0-2 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serverless-operator-bundle:1.12.0-5 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serverless-rhel8-operator:1.12.0-4 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-activator-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-autoscaler-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-controller-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-queue-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-storage-version-migration-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/serving-webhook-rhel8:0.18.2-3 | * |
| Openshift Serveless 1.12 | RedHat | openshift-serverless-1/svls-must-gather-rhel8:1.12.0-2 | * |
| Openshift Serverless 1 on RHEL 8 | RedHat | openshift-serverless-clients-0:0.18.4-2.el8 | * |
| OpenShift Service Mesh 2.0 | RedHat | kiali-0:v1.24.4.redhat2-1.el8 | * |
| Red Hat Developer Tools | RedHat | go-toolset-1.14-0:1.14.12-1.el7_9 | * |
| Red Hat Developer Tools | RedHat | go-toolset-1.14-golang-0:1.14.12-1.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | go-toolset:rhel8-8030020201118084734.58e1918e | * |
| Red Hat Enterprise Linux 8 | RedHat | container-tools:2.0-8030020210302075156.830d479e | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | cri-o-0:1.19.1-2.rhaos4.6.git2af9ecf.el8 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift-0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift-clients-0:4.6.0-202012172338.p0.git.3800.30af700.el7 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-aws-machine-controllers:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-aws-pod-identity-webhook-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-azure-machine-controllers:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-baremetal-installer-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-baremetal-machine-controllers:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-baremetal-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-baremetal-runtimecfg-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cli:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cli-artifacts:v4.6.0-202101090741.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cloud-credential-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-authentication-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-autoscaler:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-autoscaler-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-bootstrap:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-config-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-dns-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-image-registry-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-ingress-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-apiserver-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-controller-manager-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-scheduler-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-machine-approver:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-monitoring-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-network-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-node-tuning-operator:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-openshift-apiserver-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-openshift-controller-manager-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-policy-controller-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-samples-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-storage-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-version-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-configmap-reloader:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-console:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-console-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-container-networking-plugins-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-coredns:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-driver-manila-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-driver-manila-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-driver-nfs-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-attacher:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-attacher-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-provisioner:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-provisioner-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-resizer:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-resizer-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-snapshotter:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-external-snapshotter-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-livenessprobe:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-livenessprobe-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-node-driver-registrar:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-node-driver-registrar-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-snapshot-controller:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-csi-snapshot-controller-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-docker-builder:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-gcp-machine-controllers-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-grafana:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-hyperkube:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-insights-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-installer:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-installer-artifacts:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-jenkins:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-jenkins-agent-base:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-k8s-prometheus-adapter:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-kube-proxy:v4.6.0-202101120700.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-kube-rbac-proxy:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-kube-state-metrics:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-kube-storage-version-migrator-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-kuryr-cni-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-libvirt-machine-controllers:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-local-storage-static-provisioner:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-machine-api-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-machine-config-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-mdns-publisher-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-multus-admission-controller:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-multus-cni:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-multus-route-override-cni-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-must-gather:v4.6.0-202101090741.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-network-metrics-daemon-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-oauth-apiserver-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-oauth-proxy:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-oauth-server-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-openshift-apiserver-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-openshift-controller-manager-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-openshift-state-metrics-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-openstack-machine-controllers:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-operator-lifecycle-manager:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-operator-marketplace:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ovirt-machine-controllers-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ovn-kubernetes:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-pod:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prometheus:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prometheus-alertmanager:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prometheus-config-reloader:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prometheus-node-exporter:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prometheus-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-prom-label-proxy:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sdn-rhel8:v4.6.0-202101120700.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-service-ca-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-telemeter:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-tests:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-thanos-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ovirt-csi-driver-rhel7:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ovirt-csi-driver-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ansible-operator:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-capacity:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-descheduler-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-kube-descheduler-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-cluster-nfd-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-clusterresourceoverride-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-clusterresourceoverride-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-descheduler:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-elasticsearch-proxy:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ghostunnel:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-helm-operator:v4.6.0-202101120925.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-leader-elector-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-local-storage-diskmaker:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-local-storage-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-metering-helm-container-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-metering-reporting-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-node-feature-discovery:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-node-problem-detector-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ptp:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-ptp-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-cni:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-dp-admission-controller:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-infiniband-cni:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-network-config-daemon:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-network-device-plugin:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-network-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-network-webhook:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-sriov-operator-must-gather:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-vertical-pod-autoscaler-rhel8:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/ose-vertical-pod-autoscaler-rhel8-operator:v4.6.0-202101090040.p0 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | skopeo-1:1.1.1-3.rhaos4.6.el8 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/compliance-rhel8-operator:v4.6.0-107 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift4/file-integrity-rhel8-operator:v4.6.0-62 | * |
| Red Hat OpenShift Container Platform 4.6 | RedHat | openshift-eventrouter-0:0.2-6.git7c289cc.el8 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | cri-tools-0:1.20.0-2.el7 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | openshift4/ose-operator-registry:v4.7.0-202102130115.p0 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | ignition-0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | golang-github-prometheus-promu-0:0.5.0-3.git642a960.el8 | * |
| Red Hat OpenShift Container Storage 4.6.0 on RHEL-8 | RedHat | ocs4/cephcsi-rhel8:4.6-54.49cf5efdd.release_4.6 | * |
| Red Hat OpenShift Container Storage 4.6.0 on RHEL-8 | RedHat | ocs4/rook-ceph-rhel8-operator:4.6-82.8c7ed584.release_4.6 | * |
| Red Hat OpenShift Container Storage 4.7.0 on RHEL-8 | RedHat | ocs4/mcg-rhel8-operator:5.7.0-69.85e2026.5.7 | * |
| Red Hat OpenShift Container Storage 4.7.0 on RHEL-8 | RedHat | mcg-0:5.7.0-69.85e2026.5.7.el8 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-agent-rhel8:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-all-in-one-rhel8:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-collector-rhel8:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-ingester-rhel8:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-query-rhel8:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.17 | RedHat | distributed-tracing/jaeger-rhel8-operator:1.17.9-7 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-agent-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-all-in-one-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-collector-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-ingester-rhel8:1.20.4-17 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-query-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-rhel8-operator:1.20.4-18 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-cpu-model-nfd-plugin:v2.6.0-9 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-cpu-node-labeller:v2.6.0-7 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-kvm-info-nfd-plugin:v2.6.0-7 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/vm-import-controller:v2.6.0-25 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/vm-import-controller-rhel8:v2.6.0-25 | * |
| Golang | Ubuntu | trusty | * |
| Golang-1.10 | Ubuntu | trusty | * |
| Golang-1.14 | Ubuntu | esm-infra/focal | * |
| Golang-1.14 | Ubuntu | focal | * |
| Golang-1.14 | Ubuntu | groovy | * |
| Golang-1.14 | Ubuntu | hirsute | * |
| Golang-1.14 | Ubuntu | upstream | * |
| Golang-1.15 | Ubuntu | groovy | * |
| Golang-1.15 | Ubuntu | hirsute | * |
| Golang-1.15 | Ubuntu | impish | * |
| Golang-1.15 | Ubuntu | upstream | * |
| Golang-1.6 | Ubuntu | trusty | * |
Potential Mitigations
Related Attack Patterns
References
- https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI
- https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/
- https://security.netapp.com/advisory/ntap-20201202-0004/
- https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62
- https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI
- https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/
- https://security.netapp.com/advisory/ntap-20201202-0004/
- https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62