CVE Vulnerabilities

CVE-2021-33195

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Published: Aug 02, 2021 | Modified: Sep 14, 2022
CVSS 3.x
7.3
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Ubuntu
MEDIUM

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

Weakness

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Affected Software

Name Vendor Start Version End Version
Go Golang * 1.15.13 (excluding)
Go Golang 1.16.0 (including) 1.16.5 (excluding)
Openshift Serverless 1.17 RedHat openshift-serverless-1/client-kn-rhel8:0.23.2-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-mtping-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-sugar-controller-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/eventing-webhook-rhel8:0.23.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/ingress-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/knative-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:0.23.2-1 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/kourier-control-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/net-istio-controller-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/net-istio-webhook-rhel8:0.23.0-4 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serverless-operator-bundle:1.17.0-11 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serverless-rhel8-operator:1.17.0-5 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-activator-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-autoscaler-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-controller-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-domain-mapping-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-queue-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/serving-webhook-rhel8:0.23.1-2 *
Openshift Serverless 1.17 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.17.0-5 *
Openshift Serverless 1 on RHEL 8 RedHat openshift-serverless-clients-0:0.23.2-1.el8 *
Red Hat Developer Tools RedHat go-toolset-1.15-golang-0:1.15.14-2.el7_9 *
Red Hat Enterprise Linux 8 RedHat go-toolset:rhel8-8050020210817155413.8aa62369 *
Red Hat Enterprise Linux 8 RedHat grafana-0:7.5.9-4.el8 *
Red Hat Enterprise Linux 9 RedHat buildah-1:1.27.0-2.el9 *
Red Hat Migration Toolkit for Containers 1.5 RedHat rhmtc/openshift-migration-must-gather-rhel8:v1.5.1-3 *
Red Hat Migration Toolkit for Containers 1.5 RedHat rhmtc/openshift-migration-registry-rhel8:v1.5.1-4 *
Red Hat Migration Toolkit for Containers 1.5 RedHat rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.5.1-4 *
Red Hat Migration Toolkit for Containers 1.5 RedHat rhmtc/openshift-migration-velero-rhel8:v1.5.1-4 *
Red Hat Migration Toolkit for Containers 1.5 RedHat rhmtc/openshift-velero-plugin-rhel8:v1.5.1-4 *
Red Hat OpenShift Container Platform 4.10 RedHat openshift4-wincw/windows-machine-config-operator-bundle:v5.0.0-5 *
Red Hat OpenShift Container Platform 4.10 RedHat openshift4-wincw/windows-machine-config-rhel8-operator:5.0.0-5 *
Red Hat OpenShift Container Platform 4.6 RedHat ignition-0:2.6.0-8.rhaos4.6.git947598e.el8 *
Red Hat OpenShift Container Platform 4.7 RedHat atomic-openshift-service-idler-0:4.7.0-202107291238.p0.git.39cfc66.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.7 RedHat cri-o-0:1.20.4-7.rhaos4.7.git6287500.el8 *
Red Hat OpenShift Container Platform 4.7 RedHat ignition-0:2.9.0-4.rhaos4.7.git1d56dc8.el8 *
Red Hat OpenShift Container Platform 4.7 RedHat openshift-0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.7 RedHat openshift-clients-0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7 *
Red Hat OpenShift Container Platform 4.7 RedHat redhat-release-coreos-0:47.84-1.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat cri-o-0:1.21.2-8.rhaos4.8.git8d4264e.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat ignition-0:2.9.0-7.rhaos4.8.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift-0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift-clients-0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat containernetworking-plugins-0:0.8.6-3.rhaos4.6.el7 *
Red Hat OpenShift Container Platform 4.8 RedHat cri-tools-0:1.21.0-3.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat golang-github-prometheus-promu-0:0.5.0-4.git642a960.el8 *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/egress-router-cni-rhel8:v4.8.0-202107292232.p0.git.016bea1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/network-tools-rhel8:v4.8.0-202107301725.p0.git.5ac3739.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-ebs-csi-driver-rhel8:v4.8.0-202107291502.p0.git.8c036e4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d1fe616.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-machine-controllers:v4.8.0-202107291502.p0.git.4c66f3d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-aws-pod-identity-webhook-rhel8:v4.8.0-202107291502.p0.git.2b8eee2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-disk-csi-driver-rhel8:v4.8.0-202107291502.p0.git.2d461b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.d3a3c29.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-azure-machine-controllers:v4.8.0-202107291502.p0.git.8301076.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-installer-rhel8:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-machine-controllers:v4.8.0-202107291502.p0.git.a60d493.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-rhel8-operator:v4.8.0-202107291502.p0.git.015024f.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-baremetal-runtimecfg-rhel8:v4.8.0-202107291502.p0.git.c8b1456.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cli:v4.8.0-202107292232.p0.git.1077b05.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cli-artifacts:v4.8.0-202107292232.p0.git.1077b05.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cloud-credential-operator:v4.8.0-202107291502.p0.git.b8932e9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-authentication-operator:v4.8.0-202107302324.p0.git.348765e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-autoscaler:v4.8.0-202107291502.p0.git.7bbde4c.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-autoscaler-operator:v4.8.0-202107291502.p0.git.fdae5ba.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-baremetal-operator-rhel8:v4.8.0-202107291502.p0.git.04a2ae2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-bootstrap:v4.8.0-202107291502.p0.git.1af395b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-config-operator:v4.8.0-202107291502.p0.git.c102241.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.8.0-202107291502.p0.git.07b3f81.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-dns-operator:v4.8.0-202107291502.p0.git.fdb2ebe.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-etcd-rhel8-operator:v4.8.0-202107291502.p0.git.300bdf3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-image-registry-operator:v4.8.0-202107301328.p0.git.e137fea.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-ingress-operator:v4.8.0-202107291502.p0.git.e9e6295.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-apiserver-operator:v4.8.0-202107302324.p0.git.7f3081b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-controller-manager-operator:v4.8.0-202107291502.p0.git.9dc35db.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-scheduler-operator:v4.8.0-202107291502.p0.git.170a5a6.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator:v4.8.0-202107291502.p0.git.c4f4f8b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-machine-approver:v4.8.0-202107291502.p0.git.724abd2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-monitoring-operator:v4.8.0-202107301646.p0.git.16caab3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-network-operator:v4.8.0-202107291502.p0.git.a5ebd1e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-node-tuning-operator:v4.8.0-202107291502.p0.git.6be3f67.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-openshift-apiserver-operator:v4.8.0-202107302324.p0.git.d0b22d8.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-openshift-controller-manager-operator:v4.8.0-202107291502.p0.git.286c157.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-policy-controller-rhel8:v4.8.0-202107291502.p0.git.ec46ea5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-samples-operator:v4.8.0-202107291502.p0.git.31fb491.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-storage-operator:v4.8.0-202107291502.p0.git.874422c.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-cluster-version-operator:v4.8.0-202107291502.p0.git.ea6e779.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-configmap-reloader:v4.8.0-202107291502.p0.git.abc5c26.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-console:v4.8.0-202107301422.p0.git.5045bcb.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-console-operator:v4.8.0-202107300027.p0.git.696f464.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-container-networking-plugins-rhel8:v4.8.0-202107292232.p0.git.71a8b34.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-coredns:v4.8.0-202107291502.p0.git.642b46e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-manila-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-manila-rhel8-operator:v4.8.0-202107291502.p0.git.7e86252.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-driver-nfs-rhel8:v4.8.0-202107291502.p0.git.9404d34.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-attacher:v4.8.0-202107291502.p0.git.596da63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-attacher-rhel8:v4.8.0-202107291502.p0.git.596da63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-provisioner:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-provisioner-rhel8:v4.8.0-202107291502.p0.git.3ea7e68.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-resizer:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-resizer-rhel8:v4.8.0-202107291502.p0.git.b5dd2b3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-snapshotter:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-external-snapshotter-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-livenessprobe:v4.8.0-202107291502.p0.git.a29b115.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-livenessprobe-rhel8:v4.8.0-202107291502.p0.git.a29b115.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-node-driver-registrar:v4.8.0-202107291502.p0.git.0519730.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-node-driver-registrar-rhel8:v4.8.0-202107291502.p0.git.0519730.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-controller:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-controller-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-csi-snapshot-validation-webhook-rhel8:v4.8.0-202107291502.p0.git.1e2cca9.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-docker-builder:v4.8.0-202107291502.p0.git.c089361.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-docker-registry:v4.8.0-202107291502.p0.git.a87e6c5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-machine-controllers-rhel8:v4.8.0-202107291502.p0.git.34db56e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.35ebe86.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-gcp-pd-csi-driver-rhel8:v4.8.0-202107291502.p0.git.0b61889.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-grafana:v4.8.0-202107291502.p0.git.b987e4b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-hyperkube:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-insights-rhel8-operator:v4.8.0-202107301030.p0.git.4303ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-installer:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-installer-artifacts:v4.8.0-202107291502.p0.git.1831f62.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-jenkins:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-jenkins-agent-base:v4.8.0-202107292232.p0.git.8f554e2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-k8s-prometheus-adapter:v4.8.0-202107291502.p0.git.2856bc2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-proxy:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-rbac-proxy:v4.8.0-202107291502.p0.git.813c3da.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-state-metrics:v4.8.0-202107291502.p0.git.9471662.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kube-storage-version-migrator-rhel8:v4.8.0-202107291502.p0.git.901a6d2.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-kuryr-cni-rhel8:v4.8.0-202107291502.p0.git.8a4c2d8.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-libvirt-machine-controllers:v4.8.0-202107291502.p0.git.1a48d4b.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-machine-api-operator:v4.8.0-202107291502.p0.git.1155220.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-machine-config-operator:v4.8.0-202107291502.p0.git.d0db136.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-mdns-publisher-rhel8:v4.8.0-202107291502.p0.git.2c42cc4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-admission-controller:v4.8.0-202107291502.p0.git.64645fe.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-cni:v4.8.0-202107292232.p0.git.0c97234.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-networkpolicy-rhel8:v4.8.0-202107291502.p0.git.187ad91.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-route-override-cni-rhel8:v4.8.0-202107292232.p0.git.1662c3e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.8.0-202107292232.p0.git.9a05258.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-must-gather:v4.8.0-202107292232.p0.git.515e050.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-network-metrics-daemon-rhel8:v4.8.0-202107291502.p0.git.f02c63a.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-apiserver-rhel8:v4.8.0-202107291502.p0.git.09435a5.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-proxy:v4.8.0-202107291502.p0.git.3fc0d89.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-oauth-server-rhel8:v4.8.0-202107291502.p0.git.374e2ee.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-apiserver-rhel8:v4.8.0-202107291502.p0.git.3949869.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-controller-manager-rhel8:v4.8.0-202107291502.p0.git.2e25328.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openshift-state-metrics-rhel8:v4.8.0-202107291502.p0.git.1014291.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-cinder-csi-driver-rhel8:v4.8.0-202107291502.p0.git.3579ead.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.1184ace.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-openstack-machine-controllers:v4.8.0-202107291502.p0.git.3024c78.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-lifecycle-manager:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-marketplace:v4.8.0-202107291502.p0.git.e39ff59.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-operator-registry:v4.8.0-202107291502.p0.git.e1ceb8e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-ovirt-machine-controllers-rhel8:v4.8.0-202107300027.p0.git.b6eaef6.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-ovn-kubernetes:v4.8.0-202107301725.p0.git.542b44d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-pod:v4.8.0-202107300027.p0.git.38b3ecc.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus:v4.8.0-202107291502.p0.git.f3beb88.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-alertmanager:v4.8.0-202107291502.p0.git.7b5ac87.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-config-reloader:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-node-exporter:v4.8.0-202107291502.p0.git.c926449.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prometheus-operator:v4.8.0-202107291502.p0.git.9d679a1.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-prom-label-proxy:v4.8.0-202107291502.p0.git.2faeb40.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-sdn-rhel8:v4.8.0-202107292232.p0.git.6ac86f3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-service-ca-operator:v4.8.0-202107291502.p0.git.bcc6df4.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-telemeter:v4.8.0-202107291502.p0.git.d6ceb8a.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-tests:v4.8.0-202107310624.p0.git.98fef63.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-thanos-rhel8:v4.8.0-202107291502.p0.git.c358e96.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vmware-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.8.0-202107291502.p0.git.edbdd69.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.8.0-202107291502.p0.git.dd5345e.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ose-vsphere-problem-detector-rhel8:v4.8.0-202107291502.p0.git.c02283d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ovirt-csi-driver-rhel7:v4.8.0-202107291502.p0.git.c0b1ec3.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat openshift4/ovirt-csi-driver-rhel8-operator:v4.8.0-202107291502.p0.git.7b6cd3d.assembly.stream *
Red Hat OpenShift Container Platform 4.8 RedHat butane-0:0.12.1-2.rhaos4.8.el8 *
Red Hat OpenShift Container Platform 4.9 RedHat openshift4/ose-etcd:v4.9.0-202109302317.p0.git.5c1feaf.assembly.stream *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat mcg-0:5.9.0-28.61dcf87.5.9.el8 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/cephcsi-rhel8:4.9-164.57484e3.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/ocs-must-gather-rhel8:4.9-257.4181add.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/ocs-operator-bundle:4.9.0-5 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/ocs-rhel8-operator:4.9-257.4181add.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odf-console-rhel8:4.9-39.0f2fa23.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odf-multicluster-operator-bundle:4.9.0-5 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odf-multicluster-rhel8-operator:4.9-30.007b3d8.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odf-operator-bundle:4.9.0-5 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odf-rhel8-operator:4.9-59.c8bbc1f.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odr-cluster-operator-bundle:4.9.0-5 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odr-hub-operator-bundle:4.9.0-5 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/odr-rhel8-operator:4.9-27.3d037cc.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/rook-ceph-rhel8-operator:4.9-219.c3f67c6.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf4/volume-replication-rhel8-operator:4.9-28.82f68db.release_4.9 *
Red Hat OpenShift Data Foundation 4.9.0 on RHEL-8 RedHat odf/odf-multicluster-rhel8-operator:4.9-30.007b3d8.release_4.9 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-agent-rhel8:1.20.5-6 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-all-in-one-rhel8:1.20.5-3 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-collector-rhel8:1.20.5-5 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-ingester-rhel8:1.20.5-6 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-query-rhel8:1.20.5-3 *
Red Hat OpenShift Jaeger 1.20 RedHat distributed-tracing/jaeger-rhel8-operator:1.20.5-5 *
Red Hat OpenStack Platform 16.1 RedHat etcd-0:3.3.23-3.1.el8ost.1 *
Red Hat OpenStack Platform 16.2 RedHat etcd-0:3.3.23-3.1.el8ost.1 *
RHACS-3.64-RHEL-8 RedHat advanced-cluster-security/rhacs-rhel8-operator:3.64.0-2 *
RHEL-7-CNV-2.6 RedHat kubevirt-0:2.6.10-230.el7 *
RHEL-7-CNV-4.8 RedHat kubevirt-0:4.8.5-278.el7 *
RHEL-8-CNV-2.6 RedHat kubevirt-0:2.6.10-230.el8 *
RHEL-8-CNV-4.10 RedHat container-native-virtualization/cnv-must-gather-rhel8:v4.10.0-110 *
RHEL-8-CNV-4.8 RedHat container-native-virtualization/vm-import-controller:v4.8.2-4 *
RHEL-8-CNV-4.8 RedHat container-native-virtualization/vm-import-controller-rhel8:v4.8.2-4 *
RHEL-8-CNV-4.8 RedHat container-native-virtualization/vm-import-operator-rhel8:v4.8.2-4 *
RHEL-8-CNV-4.8 RedHat kubevirt-0:4.8.5-278.el8 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubemacpool:v4.9.0-19 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/kubernetes-nmstate-handler-rhel8:v4.9.0-25 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-apiserver:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-cloner:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-controller:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-operator:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-uploadproxy:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-uploadserver:v4.9.0-37 *
RHEL-8-CNV-4.9 RedHat container-native-virtualization/virt-cdi-importer:v4.9.2-8 *
Golang-1.11 Ubuntu trusty *
Golang-1.11 Ubuntu xenial *
Golang-1.15 Ubuntu groovy *
Golang-1.15 Ubuntu hirsute *
Golang-1.15 Ubuntu impish *
Golang-1.15 Ubuntu trusty *
Golang-1.15 Ubuntu upstream *
Golang-1.15 Ubuntu xenial *
Golang-1.16 Ubuntu bionic *
Golang-1.16 Ubuntu hirsute *
Golang-1.16 Ubuntu impish *
Golang-1.16 Ubuntu trusty *
Golang-1.16 Ubuntu upstream *
Golang-1.16 Ubuntu xenial *
Golang-1.7 Ubuntu trusty *
Golang-1.7 Ubuntu xenial *
Golang-1.8 Ubuntu bionic *
Golang-1.8 Ubuntu trusty *
Golang-1.8 Ubuntu xenial *

Potential Mitigations

References