CVE Vulnerabilities

CVE-2021-31525

Uncontrolled Recursion

Published: May 27, 2021 | Modified: Nov 07, 2023
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
LOW

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

Weakness

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Software

Name Vendor Start Version End Version
Go Golang * 1.15.12 (excluding)
Go Golang 1.16.0 (including) 1.16.4 (excluding)
Native Client for RHEL 7 for Red Hat Storage RedHat heketi-0:10.4.0-2.el7rhgs *
Openshift Serveless 1.16 RedHat openshift-serverless-1/client-kn-rhel8:0.22.0-4 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-controller-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-mtping-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-sugar-controller-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/eventing-webhook-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/ingress-rhel8-operator:1.16.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/knative-rhel8-operator:1.16.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/kourier-control-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/net-istio-controller-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/net-istio-webhook-rhel8:0.22.0-2 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serverless-operator-bundle:1.16.0-6 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serverless-rhel8-operator:1.16.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-activator-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-autoscaler-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-controller-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-domain-mapping-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-queue-rhel8:0.22.0-4 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/serving-webhook-rhel8:0.22.0-3 *
Openshift Serveless 1.16 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.16.0-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/client-kn-rhel8:0.23.2-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtping-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-sugar-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-webhook-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/ingress-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/knative-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:0.23.2-1 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/kourier-control-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/net-istio-controller-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/net-istio-webhook-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serverless-operator-bundle:1.17.0-11 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serverless-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-activator-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-autoscaler-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-controller-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-domain-mapping-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-queue-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-webhook-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.17.0-5 *
Openshift Serverless 1 on RHEL 8 RedHat openshift-serverless-clients-0:0.22.0-3.el8 *
Openshift Serverless 1 on RHEL 8 RedHat openshift-serverless-clients-0:0.23.2-1.el8 *
Red Hat Enterprise Linux 8 RedHat go-toolset:rhel8-8040020210716085908.5081a262 *
Red Hat Gluster Storage 3.5 for RHEL 7 RedHat rhgs3/rhgs-gluster-block-prov-rhel7:3.11.8-1 *
Red Hat Gluster Storage 3.5 for RHEL 7 RedHat heketi-0:10.4.0-2.el7rhgs *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-controller-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-operator-bundle:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-registry-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-ui-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-rhel8:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4 *
Red Hat OpenShift Container Platform 4.10 RedHat openshift4-wincw/windows-machine-config-operator-bundle:v5.0.0-5 *
Red Hat OpenShift Container Platform 4.10 RedHat openshift4-wincw/windows-machine-config-rhel8-operator:5.0.0-5 *
Red Hat OpenShift Container Platform 4.7 RedHat ignition-0:2.9.0-4.rhaos4.7.git1d56dc8.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat cri-o-0:1.21.2-8.rhaos4.8.git8d4264e.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat ignition-0:2.9.0-7.rhaos4.8.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift-0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift-clients-0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat containernetworking-plugins-0:0.8.6-3.rhaos4.6.el7 *
Red Hat OpenShift Container Platform 4.8 RedHat cri-tools-0:1.21.0-3.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat golang-github-prometheus-promu-0:0.5.0-4.git642a960.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/egress-router-cni-rhel8:v4.8.0-202107292232.p0.git.016bea1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/network-tools-rhel8:v4.8.0-202107301725.p0.git.5ac3739.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-ebs-csi-driver-rhel8:v4.8.0-202107291502.p0.git.8c036e4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d1fe616.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-machine-controllers:v4.8.0-202107291502.p0.git.4c66f3d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-pod-identity-webhook-rhel8:v4.8.0-202107291502.p0.git.2b8eee2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-disk-csi-driver-rhel8:v4.8.0-202107291502.p0.git.2d461b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d3a3c29.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-machine-controllers:v4.8.0-202107291502.p0.git.8301076.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-installer-rhel8:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-machine-controllers:v4.8.0-202107291502.p0.git.a60d493.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-rhel8-operator:v4.8.0-202107291502.p0.git.015024f.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-runtimecfg-rhel8:v4.8.0-202107291502.p0.git.c8b1456.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cli:v4.8.0-202107292232.p0.git.1077b05.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cli-artifacts:v4.8.0-202107292232.p0.git.1077b05.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cloud-credential-operator:v4.8.0-202107291502.p0.git.b8932e9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-authentication-operator:v4.8.0-202107302324.p0.git.348765e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-autoscaler:v4.8.0-202107291502.p0.git.7bbde4c.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-autoscaler-operator:v4.8.0-202107291502.p0.git.fdae5ba.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-baremetal-operator-rhel8:v4.8.0-202107291502.p0.git.04a2ae2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-bootstrap:v4.8.0-202107291502.p0.git.1af395b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-config-operator:v4.8.0-202107291502.p0.git.c102241.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.8.0-202107291502.p0.git.07b3f81.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-dns-operator:v4.8.0-202107291502.p0.git.fdb2ebe.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-etcd-rhel8-operator:v4.8.0-202107291502.p0.git.300bdf3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-image-registry-operator:v4.8.0-202107301328.p0.git.e137fea.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-ingress-operator:v4.8.0-202107291502.p0.git.e9e6295.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-apiserver-operator:v4.8.0-202107302324.p0.git.7f3081b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-controller-manager-operator:v4.8.0-202107291502.p0.git.9dc35db.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-scheduler-operator:v4.8.0-202107291502.p0.git.170a5a6.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator:v4.8.0-202107291502.p0.git.c4f4f8b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-machine-approver:v4.8.0-202107291502.p0.git.724abd2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-monitoring-operator:v4.8.0-202107301646.p0.git.16caab3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-network-operator:v4.8.0-202107291502.p0.git.a5ebd1e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-node-tuning-operator:v4.8.0-202107291502.p0.git.6be3f67.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-openshift-apiserver-operator:v4.8.0-202107302324.p0.git.d0b22d8.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-openshift-controller-manager-operator:v4.8.0-202107291502.p0.git.286c157.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-policy-controller-rhel8:v4.8.0-202107291502.p0.git.ec46ea5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-samples-operator:v4.8.0-202107291502.p0.git.31fb491.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-storage-operator:v4.8.0-202107291502.p0.git.874422c.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-version-operator:v4.8.0-202107291502.p0.git.ea6e779.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-configmap-reloader:v4.8.0-202107291502.p0.git.abc5c26.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-console:v4.8.0-202107301422.p0.git.5045bcb.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-console-operator:v4.8.0-202107300027.p0.git.696f464.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-container-networking-plugins-rhel8:v4.8.0-202107292232.p0.git.71a8b34.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-coredns:v4.8.0-202107291502.p0.git.642b46e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-manila-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-manila-rhel8-operator:v4.8.0-202107291502.p0.git.7e86252.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-nfs-rhel8:v4.8.0-202107291502.p0.git.9404d34.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-attacher:v4.8.0-202107291502.p0.git.596da63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-attacher-rhel8:v4.8.0-202107291502.p0.git.596da63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-provisioner:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-provisioner-rhel8:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-resizer:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-resizer-rhel8:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-snapshotter:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-snapshotter-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-livenessprobe:v4.8.0-202107291502.p0.git.a29b115.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-livenessprobe-rhel8:v4.8.0-202107291502.p0.git.a29b115.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-node-driver-registrar:v4.8.0-202107291502.p0.git.0519730.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-node-driver-registrar-rhel8:v4.8.0-202107291502.p0.git.0519730.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-controller:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-controller-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-validation-webhook-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-docker-builder:v4.8.0-202107291502.p0.git.c089361.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-docker-registry:v4.8.0-202107291502.p0.git.a87e6c5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-machine-controllers-rhel8:v4.8.0-202107291502.p0.git.34db56e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.35ebe86.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-pd-csi-driver-rhel8:v4.8.0-202107291502.p0.git.0b61889.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-grafana:v4.8.0-202107291502.p0.git.b987e4b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-hyperkube:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-insights-rhel8-operator:v4.8.0-202107301030.p0.git.4303ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-installer:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-installer-artifacts:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-jenkins:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-jenkins-agent-base:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-k8s-prometheus-adapter:v4.8.0-202107291502.p0.git.2856bc2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-proxy:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-rbac-proxy:v4.8.0-202107291502.p0.git.813c3da.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-state-metrics:v4.8.0-202107291502.p0.git.9471662.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-storage-version-migrator-rhel8:v4.8.0-202107291502.p0.git.901a6d2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kuryr-cni-rhel8:v4.8.0-202107291502.p0.git.8a4c2d8.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-libvirt-machine-controllers:v4.8.0-202107291502.p0.git.1a48d4b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-machine-api-operator:v4.8.0-202107291502.p0.git.1155220.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-machine-config-operator:v4.8.0-202107291502.p0.git.d0db136.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-mdns-publisher-rhel8:v4.8.0-202107291502.p0.git.2c42cc4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-admission-controller:v4.8.0-202107291502.p0.git.64645fe.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-cni:v4.8.0-202107292232.p0.git.0c97234.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-networkpolicy-rhel8:v4.8.0-202107291502.p0.git.187ad91.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-route-override-cni-rhel8:v4.8.0-202107292232.p0.git.1662c3e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.8.0-202107292232.p0.git.9a05258.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-must-gather:v4.8.0-202107292232.p0.git.515e050.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-network-metrics-daemon-rhel8:v4.8.0-202107291502.p0.git.f02c63a.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-apiserver-rhel8:v4.8.0-202107291502.p0.git.09435a5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-proxy:v4.8.0-202107291502.p0.git.3fc0d89.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-server-rhel8:v4.8.0-202107291502.p0.git.374e2ee.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-apiserver-rhel8:v4.8.0-202107291502.p0.git.3949869.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-controller-manager-rhel8:v4.8.0-202107291502.p0.git.2e25328.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-state-metrics-rhel8:v4.8.0-202107291502.p0.git.1014291.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-cinder-csi-driver-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.1184ace.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-machine-controllers:v4.8.0-202107291502.p0.git.3024c78.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-lifecycle-manager:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-marketplace:v4.8.0-202107291502.p0.git.e39ff59.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-registry:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-ovirt-machine-controllers-rhel8:v4.8.0-202107300027.p0.git.b6eaef6.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-ovn-kubernetes:v4.8.0-202107301725.p0.git.542b44d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-pod:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus:v4.8.0-202107291502.p0.git.f3beb88.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-alertmanager:v4.8.0-202107291502.p0.git.7b5ac87.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-config-reloader:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-node-exporter:v4.8.0-202107291502.p0.git.c926449.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-operator:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prom-label-proxy:v4.8.0-202107291502.p0.git.2faeb40.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-sdn-rhel8:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-service-ca-operator:v4.8.0-202107291502.p0.git.bcc6df4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-telemeter:v4.8.0-202107291502.p0.git.d6ceb8a.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-tests:v4.8.0-202107310624.p0.git.98fef63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-thanos-rhel8:v4.8.0-202107291502.p0.git.c358e96.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vmware-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-problem-detector-rhel8:v4.8.0-202107291502.p0.git.c02283d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ovirt-csi-driver-rhel7:v4.8.0-202107291502.p0.git.c0b1ec3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ovirt-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.7b6cd3d.assembly.stream *
Red Hat OpenShift Container Platform 4.9 RedHat openshift4/ose-etcd:v4.9.0-202109302317.p0.git.5c1feaf.assembly.stream *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-agent-rhel8:1.20.4-18 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-all-in-one-rhel8:1.20.4-18 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-collector-rhel8:1.20.4-18 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-es-index-cleaner-rhel8:1.20.4-7 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-es-rollover-rhel8:1.20.4-7 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-ingester-rhel8:1.20.4-17 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-query-rhel8:1.20.4-18 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-rhel8-operator:1.20.4-18 *
Red Hat OpenStack Platform 16.1 RedHat etcd-0:3.3.23-3.1.el8ost.1 *
Red Hat OpenStack Platform 16.2 RedHat etcd-0:3.3.23-3.1.el8ost.1 *
RHACS-3.62-RHEL-8 RedHat advanced-cluster-security/rhacs-rhel8-operator:3.62.0-4 *
RHEL-8-CNV-2.6 RedHat container-native-virtualization/kubevirt-cpu-model-nfd-plugin:v2.6.7-1 *
RHEL-8-CNV-2.6 RedHat container-native-virtualization/kubevirt-cpu-node-labeller:v2.6.7-1 *
RHEL-8-CNV-2.6 RedHat container-native-virtualization/kubevirt-kvm-info-nfd-plugin:v2.6.7-1 *
RHEL-8-CNV-2.6 RedHat container-native-virtualization/vm-import-controller:v2.6.7-5 *
RHEL-8-CNV-2.6 RedHat container-native-virtualization/vm-import-controller-rhel8:v2.6.7-5 *
RHEL-8-CNV-4.9 RedHat kubevirt-0:4.9.0-287.el8 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/bridge-marker:v4.9.0-13 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/cluster-network-addons-operator:v4.9.0-27 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/cnv-containernetworking-plugins:v4.9.0-15 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/cnv-must-gather-rhel8:v4.9.0-60 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/hostpath-provisioner-rhel8:v4.9.0-6 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/hostpath-provisioner-rhel8-operator:v4.9.0-15 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/hyperconverged-cluster-operator:v4.9.0-59 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/hyperconverged-cluster-webhook-rhel8:v4.9.0-59 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubemacpool:v4.9.0-19 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubernetes-nmstate-handler-rhel8:v4.9.0-25 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubevirt-ssp-operator:v4.9.0-28 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubevirt-template-validator:v4.9.0-14 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/ovs-cni-marker:v4.9.0-16 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/ovs-cni-plugin:v4.9.0-16 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-api:v4.9.0-61 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-apiserver:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-cloner:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-controller:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-operator:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-uploadproxy:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-uploadserver:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-controller:v4.9.0-61 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-handler:v4.9.0-61 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-launcher:v4.9.0-61 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-operator:v4.9.0-61 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/vm-import-controller-rhel8:v4.9.0-16 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/vm-import-operator-rhel8:v4.9.0-16 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-importer:v4.9.2-8 *
Golang-1.11 Ubuntu trusty *
Golang-1.11 Ubuntu xenial *
Golang-1.15 Ubuntu groovy *
Golang-1.15 Ubuntu hirsute *
Golang-1.15 Ubuntu impish *
Golang-1.15 Ubuntu trusty *
Golang-1.15 Ubuntu upstream *
Golang-1.15 Ubuntu xenial *
Golang-1.16 Ubuntu bionic *
Golang-1.16 Ubuntu hirsute *
Golang-1.16 Ubuntu impish *
Golang-1.16 Ubuntu trusty *
Golang-1.16 Ubuntu upstream *
Golang-1.16 Ubuntu xenial *
Golang-golang-x-net Ubuntu groovy *
Golang-golang-x-net Ubuntu hirsute *
Golang-golang-x-net Ubuntu impish *
Golang-golang-x-net-dev Ubuntu bionic *
Golang-golang-x-net-dev Ubuntu trusty *
Golang-golang-x-net-dev Ubuntu xenial *
Google-guest-agent Ubuntu bionic *
Google-guest-agent Ubuntu groovy *
Google-guest-agent Ubuntu hirsute *
Google-guest-agent Ubuntu impish *
Google-guest-agent Ubuntu xenial *

Potential Mitigations

References