net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.
Weakness
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Go | Golang | * | 1.15.12 (excluding) |
| Go | Golang | 1.16.0 (including) | 1.16.4 (excluding) |
| Native Client for RHEL 7 for Red Hat Storage | RedHat | heketi-0:10.4.0-2.el7rhgs | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/client-kn-rhel8:0.22.0-4 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-controller-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-mtping-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-storage-version-migration-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-sugar-controller-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/eventing-webhook-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/ingress-rhel8-operator:1.16.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/knative-rhel8-operator:1.16.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/kn-cli-artifacts-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/kourier-control-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/net-istio-controller-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/net-istio-webhook-rhel8:0.22.0-2 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serverless-operator-bundle:1.16.0-6 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serverless-rhel8-operator:1.16.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-activator-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-autoscaler-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-controller-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-domain-mapping-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-queue-rhel8:0.22.0-4 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-storage-version-migration-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/serving-webhook-rhel8:0.22.0-3 | * |
| Openshift Serveless 1.16 | RedHat | openshift-serverless-1/svls-must-gather-rhel8:1.16.0-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/client-kn-rhel8:0.23.2-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-controller-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-mtping-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-storage-version-migration-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-sugar-controller-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/eventing-webhook-rhel8:0.23.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/ingress-rhel8-operator:1.17.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/knative-rhel8-operator:1.17.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/kn-cli-artifacts-rhel8:0.23.2-1 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/kourier-control-rhel8:0.23.0-4 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/net-istio-controller-rhel8:0.23.0-4 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/net-istio-webhook-rhel8:0.23.0-4 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serverless-operator-bundle:1.17.0-11 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serverless-rhel8-operator:1.17.0-5 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-activator-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-autoscaler-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-controller-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-domain-mapping-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-queue-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-storage-version-migration-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/serving-webhook-rhel8:0.23.1-2 | * |
| Openshift Serverless 1.17 | RedHat | openshift-serverless-1/svls-must-gather-rhel8:1.17.0-5 | * |
| Openshift Serverless 1 on RHEL 8 | RedHat | openshift-serverless-clients-0:0.22.0-3.el8 | * |
| Openshift Serverless 1 on RHEL 8 | RedHat | openshift-serverless-clients-0:0.23.2-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | go-toolset:rhel8-8040020210716085908.5081a262 | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | rhgs3/rhgs-gluster-block-prov-rhel7:3.11.8-1 | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | heketi-0:10.4.0-2.el7rhgs | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-controller-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-operator-bundle:v1.4.6-5 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-registry-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-ui-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-migration-velero-rhel8:v1.4.6-5 | * |
| Red Hat Migration Toolkit for Containers 1.4 | RedHat | rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4 | * |
| Red Hat OpenShift Container Platform 4.10 | RedHat | openshift4-wincw/windows-machine-config-operator-bundle:v5.0.0-5 | * |
| Red Hat OpenShift Container Platform 4.10 | RedHat | openshift4-wincw/windows-machine-config-rhel8-operator:5.0.0-5 | * |
| Red Hat OpenShift Container Platform 4.7 | RedHat | ignition-0:2.9.0-4.rhaos4.7.git1d56dc8.el8 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | cri-o-0:1.21.2-8.rhaos4.8.git8d4264e.el7 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | ignition-0:2.9.0-7.rhaos4.8.el8 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift-0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el7 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift-clients-0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el7 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | containernetworking-plugins-0:0.8.6-3.rhaos4.6.el7 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | cri-tools-0:1.21.0-3.el8 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | golang-github-prometheus-promu-0:0.5.0-4.git642a960.el8 | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/egress-router-cni-rhel8:v4.8.0-202107292232.p0.git.016bea1.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/network-tools-rhel8:v4.8.0-202107301725.p0.git.5ac3739.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel8:v4.8.0-202107291502.p0.git.8c036e4.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d1fe616.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-aws-machine-controllers:v4.8.0-202107291502.p0.git.4c66f3d.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-aws-pod-identity-webhook-rhel8:v4.8.0-202107291502.p0.git.2b8eee2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-azure-disk-csi-driver-rhel8:v4.8.0-202107291502.p0.git.2d461b3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d3a3c29.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-azure-machine-controllers:v4.8.0-202107291502.p0.git.8301076.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-baremetal-installer-rhel8:v4.8.0-202107291502.p0.git.1831f62.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-baremetal-machine-controllers:v4.8.0-202107291502.p0.git.a60d493.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-baremetal-rhel8-operator:v4.8.0-202107291502.p0.git.015024f.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-baremetal-runtimecfg-rhel8:v4.8.0-202107291502.p0.git.c8b1456.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cli:v4.8.0-202107292232.p0.git.1077b05.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cli-artifacts:v4.8.0-202107292232.p0.git.1077b05.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cloud-credential-operator:v4.8.0-202107291502.p0.git.b8932e9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-authentication-operator:v4.8.0-202107302324.p0.git.348765e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-autoscaler:v4.8.0-202107291502.p0.git.7bbde4c.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-autoscaler-operator:v4.8.0-202107291502.p0.git.fdae5ba.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-baremetal-operator-rhel8:v4.8.0-202107291502.p0.git.04a2ae2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-bootstrap:v4.8.0-202107291502.p0.git.1af395b.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-config-operator:v4.8.0-202107291502.p0.git.c102241.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.8.0-202107291502.p0.git.07b3f81.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-dns-operator:v4.8.0-202107291502.p0.git.fdb2ebe.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-etcd-rhel8-operator:v4.8.0-202107291502.p0.git.300bdf3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-image-registry-operator:v4.8.0-202107301328.p0.git.e137fea.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-ingress-operator:v4.8.0-202107291502.p0.git.e9e6295.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-kube-apiserver-operator:v4.8.0-202107302324.p0.git.7f3081b.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-kube-controller-manager-operator:v4.8.0-202107291502.p0.git.9dc35db.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-kube-scheduler-operator:v4.8.0-202107291502.p0.git.170a5a6.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator:v4.8.0-202107291502.p0.git.c4f4f8b.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-machine-approver:v4.8.0-202107291502.p0.git.724abd2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-monitoring-operator:v4.8.0-202107301646.p0.git.16caab3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-network-operator:v4.8.0-202107291502.p0.git.a5ebd1e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-node-tuning-operator:v4.8.0-202107291502.p0.git.6be3f67.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-openshift-apiserver-operator:v4.8.0-202107302324.p0.git.d0b22d8.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-openshift-controller-manager-operator:v4.8.0-202107291502.p0.git.286c157.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-policy-controller-rhel8:v4.8.0-202107291502.p0.git.ec46ea5.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-samples-operator:v4.8.0-202107291502.p0.git.31fb491.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-storage-operator:v4.8.0-202107291502.p0.git.874422c.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-cluster-version-operator:v4.8.0-202107291502.p0.git.ea6e779.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-configmap-reloader:v4.8.0-202107291502.p0.git.abc5c26.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-console:v4.8.0-202107301422.p0.git.5045bcb.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-console-operator:v4.8.0-202107300027.p0.git.696f464.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-container-networking-plugins-rhel8:v4.8.0-202107292232.p0.git.71a8b34.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-coredns:v4.8.0-202107291502.p0.git.642b46e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-driver-manila-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-driver-manila-rhel8-operator:v4.8.0-202107291502.p0.git.7e86252.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-driver-nfs-rhel8:v4.8.0-202107291502.p0.git.9404d34.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-attacher:v4.8.0-202107291502.p0.git.596da63.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-attacher-rhel8:v4.8.0-202107291502.p0.git.596da63.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-provisioner:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-provisioner-rhel8:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-resizer:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-resizer-rhel8:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-snapshotter:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-external-snapshotter-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-livenessprobe:v4.8.0-202107291502.p0.git.a29b115.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-livenessprobe-rhel8:v4.8.0-202107291502.p0.git.a29b115.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-node-driver-registrar:v4.8.0-202107291502.p0.git.0519730.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-node-driver-registrar-rhel8:v4.8.0-202107291502.p0.git.0519730.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-snapshot-controller:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-snapshot-controller-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-csi-snapshot-validation-webhook-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-docker-builder:v4.8.0-202107291502.p0.git.c089361.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-docker-registry:v4.8.0-202107291502.p0.git.a87e6c5.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-gcp-machine-controllers-rhel8:v4.8.0-202107291502.p0.git.34db56e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.35ebe86.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-gcp-pd-csi-driver-rhel8:v4.8.0-202107291502.p0.git.0b61889.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-grafana:v4.8.0-202107291502.p0.git.b987e4b.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-hyperkube:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-insights-rhel8-operator:v4.8.0-202107301030.p0.git.4303ecc.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-installer:v4.8.0-202107291502.p0.git.1831f62.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-installer-artifacts:v4.8.0-202107291502.p0.git.1831f62.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-jenkins:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-jenkins-agent-base:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-k8s-prometheus-adapter:v4.8.0-202107291502.p0.git.2856bc2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-kube-proxy:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-kube-rbac-proxy:v4.8.0-202107291502.p0.git.813c3da.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-kube-state-metrics:v4.8.0-202107291502.p0.git.9471662.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-kube-storage-version-migrator-rhel8:v4.8.0-202107291502.p0.git.901a6d2.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-kuryr-cni-rhel8:v4.8.0-202107291502.p0.git.8a4c2d8.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-libvirt-machine-controllers:v4.8.0-202107291502.p0.git.1a48d4b.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-machine-api-operator:v4.8.0-202107291502.p0.git.1155220.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-machine-config-operator:v4.8.0-202107291502.p0.git.d0db136.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-mdns-publisher-rhel8:v4.8.0-202107291502.p0.git.2c42cc4.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-multus-admission-controller:v4.8.0-202107291502.p0.git.64645fe.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-multus-cni:v4.8.0-202107292232.p0.git.0c97234.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-multus-networkpolicy-rhel8:v4.8.0-202107291502.p0.git.187ad91.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-multus-route-override-cni-rhel8:v4.8.0-202107292232.p0.git.1662c3e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.8.0-202107292232.p0.git.9a05258.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-must-gather:v4.8.0-202107292232.p0.git.515e050.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-network-metrics-daemon-rhel8:v4.8.0-202107291502.p0.git.f02c63a.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-oauth-apiserver-rhel8:v4.8.0-202107291502.p0.git.09435a5.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-oauth-proxy:v4.8.0-202107291502.p0.git.3fc0d89.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-oauth-server-rhel8:v4.8.0-202107291502.p0.git.374e2ee.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openshift-apiserver-rhel8:v4.8.0-202107291502.p0.git.3949869.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openshift-controller-manager-rhel8:v4.8.0-202107291502.p0.git.2e25328.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openshift-state-metrics-rhel8:v4.8.0-202107291502.p0.git.1014291.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openstack-cinder-csi-driver-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.1184ace.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-openstack-machine-controllers:v4.8.0-202107291502.p0.git.3024c78.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-operator-lifecycle-manager:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-operator-marketplace:v4.8.0-202107291502.p0.git.e39ff59.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-operator-registry:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-ovirt-machine-controllers-rhel8:v4.8.0-202107300027.p0.git.b6eaef6.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-ovn-kubernetes:v4.8.0-202107301725.p0.git.542b44d.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-pod:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prometheus:v4.8.0-202107291502.p0.git.f3beb88.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prometheus-alertmanager:v4.8.0-202107291502.p0.git.7b5ac87.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prometheus-config-reloader:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prometheus-node-exporter:v4.8.0-202107291502.p0.git.c926449.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prometheus-operator:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-prom-label-proxy:v4.8.0-202107291502.p0.git.2faeb40.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-sdn-rhel8:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-service-ca-operator:v4.8.0-202107291502.p0.git.bcc6df4.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-telemeter:v4.8.0-202107291502.p0.git.d6ceb8a.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-tests:v4.8.0-202107310624.p0.git.98fef63.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-thanos-rhel8:v4.8.0-202107291502.p0.git.c358e96.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vmware-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ose-vsphere-problem-detector-rhel8:v4.8.0-202107291502.p0.git.c02283d.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ovirt-csi-driver-rhel7:v4.8.0-202107291502.p0.git.c0b1ec3.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.8 | RedHat | openshift4/ovirt-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.7b6cd3d.assembly.stream | * |
| Red Hat OpenShift Container Platform 4.9 | RedHat | openshift4/ose-etcd:v4.9.0-202109302317.p0.git.5c1feaf.assembly.stream | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-agent-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-all-in-one-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-collector-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-es-index-cleaner-rhel8:1.20.4-7 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-es-rollover-rhel8:1.20.4-7 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-ingester-rhel8:1.20.4-17 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-query-rhel8:1.20.4-18 | * |
| Red Hat OpenShift Jaeger 1.20 | RedHat | distributed-tracing/jaeger-rhel8-operator:1.20.4-18 | * |
| Red Hat OpenStack Platform 16.1 | RedHat | etcd-0:3.3.23-3.1.el8ost.1 | * |
| Red Hat OpenStack Platform 16.2 | RedHat | etcd-0:3.3.23-3.1.el8ost.1 | * |
| RHACS-3.62-RHEL-8 | RedHat | advanced-cluster-security/rhacs-rhel8-operator:3.62.0-4 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-cpu-model-nfd-plugin:v2.6.7-1 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-cpu-node-labeller:v2.6.7-1 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/kubevirt-kvm-info-nfd-plugin:v2.6.7-1 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/vm-import-controller:v2.6.7-5 | * |
| RHEL-8-CNV-2.6 | RedHat | container-native-virtualization/vm-import-controller-rhel8:v2.6.7-5 | * |
| RHEL-8-CNV-4.9 | RedHat | kubevirt-0:4.9.0-287.el8 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/bridge-marker:v4.9.0-13 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/cluster-network-addons-operator:v4.9.0-27 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/cnv-containernetworking-plugins:v4.9.0-15 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/cnv-must-gather-rhel8:v4.9.0-60 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/hostpath-provisioner-rhel8:v4.9.0-6 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/hostpath-provisioner-rhel8-operator:v4.9.0-15 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/hyperconverged-cluster-operator:v4.9.0-59 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/hyperconverged-cluster-webhook-rhel8:v4.9.0-59 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/kubemacpool:v4.9.0-19 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/kubernetes-nmstate-handler-rhel8:v4.9.0-25 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/kubevirt-ssp-operator:v4.9.0-28 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/kubevirt-template-validator:v4.9.0-14 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/ovs-cni-marker:v4.9.0-16 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/ovs-cni-plugin:v4.9.0-16 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-api:v4.9.0-61 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-apiserver:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-cloner:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-controller:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-operator:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-uploadproxy:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-uploadserver:v4.9.0-37 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-controller:v4.9.0-61 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-handler:v4.9.0-61 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-launcher:v4.9.0-61 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-operator:v4.9.0-61 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/vm-import-controller-rhel8:v4.9.0-16 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/vm-import-operator-rhel8:v4.9.0-16 | * |
| RHEL-8-CNV-4.9 | RedHat | container-native-virtualization/virt-cdi-importer:v4.9.2-8 | * |
| Golang-1.11 | Ubuntu | trusty | * |
| Golang-1.11 | Ubuntu | xenial | * |
| Golang-1.15 | Ubuntu | groovy | * |
| Golang-1.15 | Ubuntu | hirsute | * |
| Golang-1.15 | Ubuntu | impish | * |
| Golang-1.15 | Ubuntu | trusty | * |
| Golang-1.15 | Ubuntu | upstream | * |
| Golang-1.15 | Ubuntu | xenial | * |
| Golang-1.16 | Ubuntu | bionic | * |
| Golang-1.16 | Ubuntu | focal | * |
| Golang-1.16 | Ubuntu | hirsute | * |
| Golang-1.16 | Ubuntu | impish | * |
| Golang-1.16 | Ubuntu | trusty | * |
| Golang-1.16 | Ubuntu | upstream | * |
| Golang-1.16 | Ubuntu | xenial | * |
| Golang-golang-x-net | Ubuntu | groovy | * |
| Golang-golang-x-net | Ubuntu | hirsute | * |
| Golang-golang-x-net | Ubuntu | impish | * |
| Golang-golang-x-net-dev | Ubuntu | bionic | * |
| Golang-golang-x-net-dev | Ubuntu | focal | * |
| Golang-golang-x-net-dev | Ubuntu | trusty | * |
| Golang-golang-x-net-dev | Ubuntu | xenial | * |
| Google-guest-agent | Ubuntu | bionic | * |
| Google-guest-agent | Ubuntu | groovy | * |
| Google-guest-agent | Ubuntu | hirsute | * |
| Google-guest-agent | Ubuntu | impish | * |
| Google-guest-agent | Ubuntu | xenial | * |
Potential Mitigations
Related Attack Patterns
References
- https://github.com/golang/go/issues/45710
- https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ISRZZ6NY5R2TBYE72KZFOCO25TEUQTBF/
- https://security.gentoo.org/glsa/202208-02
- https://github.com/golang/go/issues/45710
- https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ISRZZ6NY5R2TBYE72KZFOCO25TEUQTBF/
- https://security.gentoo.org/glsa/202208-02