CVE-2021-21607
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
CVE-2021-21607- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-770
- Updated
- 2026-11-02
CVE List No score
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
CVE-2021-21607- Updated
- 2026-11-02
EUVDEUVD-2022-3663 No score
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
EUVD-2022-3663- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxqw-vjcr-gp5g
6.5
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics.
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters.
This allows attackers to request or to have legitimate Jenkins users request crafted URLs that rapidly use all available memory in Jenkins, potentially leading to out of memory errors.
Jenkins 2.275, LTS 2.263.2 limits the maximum size of graphs to an area of 10 million pixels. If a larger size is requested, the default size for the graph will be rendered instead.
This threshold can be configured by setting the Java system property hudson.util.Graph.maxArea to a different number on startup.
- Record
GHSA-cxqw-vjcr-gp5g- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-21607
6.5
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
ALPINE-CVE-2021-21607- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
6.5
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
CVE-2021-21607- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVGHSA-cxqw-vjcr-gp5g
6.5
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics.
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters.
This allows attackers to request or to have legitimate Jenkins users request crafted URLs that rapidly use all available memory in Jenkins, potentially leading to out of memory errors.
Jenkins 2.275, LTS 2.263.2 limits the maximum size of graphs to an area of 10 million pixels. If a larger size is requested, the default size for the graph will be rendered instead.
This threshold can be configured by setting the Java system property hudson.util.Graph.maxArea to a different number on startup.
- Record
GHSA-cxqw-vjcr-gp5g- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVRHSA-2021:0423
8.0
Red Hat Security Advisory: OpenShift Container Platform 4.6.17 security and packages update
- Record
RHSA-2021:0423- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0429
8.0
Red Hat Security Advisory: OpenShift Container Platform 4.5.33 packages and security update
- Record
RHSA-2021:0429- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0637
8.0
Red Hat Security Advisory: OpenShift Container Platform 3.11.394 bug fix and security update
- Record
RHSA-2021:0637- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2437
8.6
Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update
- Record
RHSA-2021:2437- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVBIT-jenkins-2021-21607 No score
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
- Record
BIT-jenkins-2021-21607- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven |
through 2.263.1 | 2.263.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.264 to 2.274 | 2.275 |
jenkinsAlpine:v3.12 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.13 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.14 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.15 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.16 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.17 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.18 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.19 |
before 2.275-r0 | 2.275-r0 |
Show 210 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jenkinsAlpine:v3.20 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.21 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.22 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.23 |
before 2.275-r0 | 2.275-r0 |
jenkinsAlpine:v3.24 |
before 2.275-r0 | 2.275-r0 |
jenkinsBitnami |
before 2.274.1 | 2.274.1 |
org.jenkins-ci.main:jenkins-coreMaven |
before 2.263.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 |
2.263.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.264 up to 2.275, plus listed versions 2.2652.2662.2672.2682.269 Show 5 moreShow less2.2702.2712.2722.2732.274 |
2.275 |
jenkinsRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.263.3.1612434510-1.el8 | 0:2.263.3.1612434510-1.el8 |
conmonRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 2:2.0.21-1.rhaos4.5.el7 | 2:2.0.21-1.rhaos4.5.el7 |
jenkinsRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:2.263.3.1612434332-1.el7 | 0:2.263.3.1612434332-1.el7 |
openshiftRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102050524.p0.git.0.9229406.el7 | 0:4.5.0-202102050524.p0.git.0.9229406.el7 |
openshift-ansibleRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102031005.p0.git.0.c6839a2.el7 | 0:4.5.0-202102031005.p0.git.0.c6839a2.el7 |
openshift-ansible-testRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102031005.p0.git.0.c6839a2.el7 | 0:4.5.0-202102031005.p0.git.0.c6839a2.el7 |
openshift-clientsRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102051529.p0.git.3612.61b096a.el7 | 0:4.5.0-202102051529.p0.git.3612.61b096a.el7 |
openshift-clients-redistributableRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102051529.p0.git.3612.61b096a.el7 | 0:4.5.0-202102051529.p0.git.3612.61b096a.el7 |
openshift-hyperkubeRed Hat:openshift:4.5::el7 From an advisory covering 13 CVEs |
before 0:4.5.0-202102050524.p0.git.0.9229406.el7 | 0:4.5.0-202102050524.p0.git.0.9229406.el7 |
conmonRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 2:2.0.21-1.rhaos4.5.el8 | 2:2.0.21-1.rhaos4.5.el8 |
machine-config-daemonRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8 | 0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8 |
openshiftRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:4.5.0-202102050524.p0.git.0.9229406.el8 | 0:4.5.0-202102050524.p0.git.0.9229406.el8 |
openshift-clientsRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:4.5.0-202102051529.p0.git.3612.61b096a.el8 | 0:4.5.0-202102051529.p0.git.3612.61b096a.el8 |
openshift-clients-redistributableRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:4.5.0-202102051529.p0.git.3612.61b096a.el8 | 0:4.5.0-202102051529.p0.git.3612.61b096a.el8 |
openshift-hyperkubeRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:4.5.0-202102050524.p0.git.0.9229406.el8 | 0:4.5.0-202102050524.p0.git.0.9229406.el8 |
runcRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 | 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 |
runc-debuginfoRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 | 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 |
runc-debugsourceRed Hat:openshift:4.5::el8 From an advisory covering 13 CVEs |
before 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 | 0:1.0.0-72.rhaos4.5.giteadfc6b.el8 |
jenkinsRed Hat:openshift:3.11::el7 From an advisory covering 19 CVEs |
before 0:2.263.3.1612433584-1.el7 | 0:2.263.3.1612433584-1.el7 |
jenkins-2-pluginsRed Hat:openshift:3.11::el7 From an advisory covering 19 CVEs |
before 0:3.11.1612862361-1.el7 | 0:3.11.1612862361-1.el7 |
python-rsaRed Hat:openshift:3.11::el7 From an advisory covering 19 CVEs |
before 0:4.5-3.el7 | 0:4.5-3.el7 |
python2-rsaRed Hat:openshift:3.11::el7 From an advisory covering 19 CVEs |
before 0:4.5-3.el7 | 0:4.5-3.el7 |
ignitionRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-validateRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-validate-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
openshiftRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 |
openshift-clientsRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 |
openshift-clients-redistributableRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 |
openshift-hyperkubeRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 |
openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 |
openshift-clientsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 |
openshift-clients-redistributableRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 |
cri-oRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7 | 0:1.21.2-5.rhaos4.8.gitb27d974.el7 |
cri-o-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7 | 0:1.21.2-5.rhaos4.8.gitb27d974.el7 |
cri-toolsRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el7 | 0:1.21.0-2.el7 |
cri-tools-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el7 | 0:1.21.0-2.el7 |
haproxyRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el7 | 0:2.2.13-1.el7 |
haproxy-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el7 | 0:2.2.13-1.el7 |
openshift-ansibleRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 |
openshift-ansible-testRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 |
runcRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7 | 0:1.0.0-98.rhaos4.8.gitcd80260.el7 |
runc-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7 | 0:1.0.0-98.rhaos4.8.gitcd80260.el7 |
afterburnRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
afterburn-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
atomic-openshift-service-idlerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 |
butaneRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.1-1.rhaos4.8.el8 | 0:0.12.1-1.rhaos4.8.el8 |
butane-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.1-1.rhaos4.8.el8 | 0:0.12.1-1.rhaos4.8.el8 |
console-login-helper-messagesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
console-login-helper-messages-issuegenRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
console-login-helper-messages-profileRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
coreos-installerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-bootinfraRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-bootinfra-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
cri-oRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-o-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-o-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-toolsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
cri-tools-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
cri-tools-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
haproxyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el8 | 0:2.2.13-1.el8 |
haproxy-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el8 | 0:2.2.13-1.el8 |
ironic-imagesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-allRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-ipa-ppc64leRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-ipa-x86_64Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
jenkinsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.289.1.1624020353-1.el8 | 0:2.289.1.1624020353-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.1624022417-1.el8 | 0:4.8.1624022417-1.el8 |
kata-containersRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.1.0-4.el8 | 0:2.1.0-4.el8 |
openshift-kuryrRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-cniRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-commonRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-controllerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openstack-ironicRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-apiRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-commonRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-conductorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-inspectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-apiRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-conductorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-dnsmasqRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-python-agentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:7.0.2-0.20210611153100.bfa97cb.el8 | 0:7.0.2-0.20210611153100.bfa97cb.el8 |
openvswitch2.15Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-develRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-ipsecRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
ostreeRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-develRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-grub2Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-libsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-libs-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ovn2.13Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-centralRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-central-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-hostRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-host-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-vtepRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-vtep-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
podmanRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-dockerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-plugins-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-remoteRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-remote-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
python-debtcollectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.0-0.20210324220630.649189d.el8 | 0:2.2.0-0.20210324220630.649189d.el8 |
python-eventletRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.25.2-4.el8 | 0:0.25.2-4.el8 |
python-hardwareRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python-ironic-libRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.6.2-0.20210608101214.ca2e4ba.el8 | 0:4.6.2-0.20210608101214.ca2e4ba.el8 |
python-ironic-prometheus-exporterRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-0.20210325143713.70e39c8.el8 | 0:2.2.1-0.20210325143713.70e39c8.el8 |
python-jsonschemaRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-5.el8ost | 0:3.2.0-5.el8ost |
python-keystoneauth1Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.3.0-0.20210325001456.6a66271.el8 | 0:4.3.0-0.20210325001456.6a66271.el8 |
python-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python-openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:0.12.1-1.el8 | 1:0.12.1-1.el8 |
python-openstacksdkRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python-oslo-concurrencyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python-oslo-concurrency-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python-oslo-configRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 2:8.5.0-0.20210325050501.cfa2564.el8 | 2:8.5.0-0.20210325050501.cfa2564.el8 |
python-oslo-contextRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-0.20210325043103.0d02866.el8 | 0:3.2.0-0.20210325043103.0d02866.el8 |
python-oslo-dbRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python-oslo-db-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python-oslo-i18nRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python-oslo-i18n-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python-oslo-logRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python-oslo-log-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python-oslo-policyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python-oslo-policy-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python-oslo-serializationRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python-oslo-serviceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python-oslo-upgradecheckRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.3.0-0.20210325003851.9f95a6e.el8 | 0:1.3.0-0.20210325003851.9f95a6e.el8 |
python-oslo-utilsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python-oslo-utils-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python-pyrsistentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python-stevedoreRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.3.0-0.20210325001012.7d7154f.el8 | 0:3.3.0-0.20210325001012.7d7154f.el8 |
python-sushyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python-sushy-oem-idracRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python-toozRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.8.0-0.20210324235001.54448e9.el8 | 0:2.8.0-0.20210324235001.54448e9.el8 |
python3-debtcollectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.0-0.20210324220630.649189d.el8 | 0:2.2.0-0.20210324220630.649189d.el8 |
python3-eventletRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.25.2-4.el8 | 0:0.25.2-4.el8 |
python3-hardwareRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python3-hardware-detectRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python3-ironic-inspector-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
python3-ironic-libRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.6.2-0.20210608101214.ca2e4ba.el8 | 0:4.6.2-0.20210608101214.ca2e4ba.el8 |
python3-ironic-prometheus-exporterRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-0.20210325143713.70e39c8.el8 | 0:2.2.1-0.20210325143713.70e39c8.el8 |
python3-ironic-python-agentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:7.0.2-0.20210611153100.bfa97cb.el8 | 0:7.0.2-0.20210611153100.bfa97cb.el8 |
python3-ironic-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
python3-jsonschemaRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-5.el8ost | 0:3.2.0-5.el8ost |
python3-keystoneauth1Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.3.0-0.20210325001456.6a66271.el8 | 0:4.3.0-0.20210325001456.6a66271.el8 |
python3-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python3-kubernetes-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python3-kuryr-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
python3-openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:0.12.1-1.el8 | 1:0.12.1-1.el8 |
python3-openstacksdkRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python3-openstacksdk-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python3-openvswitch2.15Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
python3-openvswitch2.15-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
python3-oslo-concurrencyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python3-oslo-concurrency-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python3-oslo-configRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 2:8.5.0-0.20210325050501.cfa2564.el8 | 2:8.5.0-0.20210325050501.cfa2564.el8 |
python3-oslo-contextRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-0.20210325043103.0d02866.el8 | 0:3.2.0-0.20210325043103.0d02866.el8 |
python3-oslo-dbRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python3-oslo-db-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python3-oslo-i18nRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python3-oslo-logRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python3-oslo-log-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python3-oslo-policyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python3-oslo-serializationRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python3-oslo-serialization-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python3-oslo-serviceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python3-oslo-service-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python3-oslo-upgradecheckRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.3.0-0.20210325003851.9f95a6e.el8 | 0:1.3.0-0.20210325003851.9f95a6e.el8 |
python3-oslo-utilsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python3-oslo-utils-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python3-pyrsistentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python3-pyrsistent-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python3-stevedoreRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.3.0-0.20210325001012.7d7154f.el8 | 0:3.3.0-0.20210325001012.7d7154f.el8 |
python3-sushyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python3-sushy-oem-idracRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python3-sushy-oem-idrac-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python3-sushy-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python3-toozRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.8.0-0.20210324235001.54448e9.el8 | 0:2.8.0-0.20210324235001.54448e9.el8 |
redhat-release-coreosRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:48.84-4.el8 | 0:48.84-4.el8 |
rteval-loadsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.4-12.el8 | 0:1.4-12.el8 |
rteval-loads-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.4-12.el8 | 0:1.4-12.el8 |
runcRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
runc-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
runc-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
rust-afterburnRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
rust-afterburn-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
stress-ngRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.06-1.el8 | 0:0.12.06-1.el8 |
stress-ng-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.06-1.el8 | 0:0.12.06-1.el8 |
toolboxRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.0.8-3.rhaos4.8.el8 | 0:0.0.8-3.rhaos4.8.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-21607 is a medium vulnerability (CVSS 6.5) in Jenkins, published January 13, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.263.2.
References
jenkins.io/security/advisory/2021-01-13
nvd.nist.gov/vuln/detail/CVE-2021-21607
github.com/jenkinsci/jenkins/commit/a890d68699ad6ca0c8fbc297a1d4b7ebf23f384b
github.com/advisories/GHSA-cxqw-vjcr-gp5g
security.alpinelinux.org/vuln/CVE-2021-21607
github.com/jenkinsci/jenkins
Show 179 moreShow less
access.redhat.com/errata/RHSA-2021:0423
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1837444
bugzilla.redhat.com/show_bug.cgi?id=1903702
bugzilla.redhat.com/show_bug.cgi?id=1921322
bugzilla.redhat.com/show_bug.cgi?id=1925140
bugzilla.redhat.com/show_bug.cgi?id=1925141
bugzilla.redhat.com/show_bug.cgi?id=1925143
bugzilla.redhat.com/show_bug.cgi?id=1925145
bugzilla.redhat.com/show_bug.cgi?id=1925151
bugzilla.redhat.com/show_bug.cgi?id=1925156
bugzilla.redhat.com/show_bug.cgi?id=1925157
bugzilla.redhat.com/show_bug.cgi?id=1925159
bugzilla.redhat.com/show_bug.cgi?id=1925160
bugzilla.redhat.com/show_bug.cgi?id=1925161
bugzilla.redhat.com/show_bug.cgi?id=1925674
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0423.json
access.redhat.com/security/cve/CVE-2020-1945
cve.org/CVERecord?id=CVE-2020-1945
nvd.nist.gov/vuln/detail/CVE-2020-1945
access.redhat.com/security/cve/CVE-2020-11979
cve.org/CVERecord?id=CVE-2020-11979
nvd.nist.gov/vuln/detail/CVE-2020-11979
security.gentoo.org/glsa/202011-18
access.redhat.com/security/cve/CVE-2021-21602
cve.org/CVERecord?id=CVE-2021-21602
nvd.nist.gov/vuln/detail/CVE-2021-21602
access.redhat.com/security/cve/CVE-2021-21603
cve.org/CVERecord?id=CVE-2021-21603
nvd.nist.gov/vuln/detail/CVE-2021-21603
access.redhat.com/security/cve/CVE-2021-21604
cve.org/CVERecord?id=CVE-2021-21604
nvd.nist.gov/vuln/detail/CVE-2021-21604
access.redhat.com/security/cve/CVE-2021-21605
cve.org/CVERecord?id=CVE-2021-21605
nvd.nist.gov/vuln/detail/CVE-2021-21605
access.redhat.com/security/cve/CVE-2021-21606
cve.org/CVERecord?id=CVE-2021-21606
nvd.nist.gov/vuln/detail/CVE-2021-21606
access.redhat.com/security/cve/CVE-2021-21607
cve.org/CVERecord?id=CVE-2021-21607
access.redhat.com/security/cve/CVE-2021-21608
cve.org/CVERecord?id=CVE-2021-21608
nvd.nist.gov/vuln/detail/CVE-2021-21608
access.redhat.com/security/cve/CVE-2021-21609
cve.org/CVERecord?id=CVE-2021-21609
nvd.nist.gov/vuln/detail/CVE-2021-21609
access.redhat.com/security/cve/CVE-2021-21610
cve.org/CVERecord?id=CVE-2021-21610
nvd.nist.gov/vuln/detail/CVE-2021-21610
access.redhat.com/security/cve/CVE-2021-21611
cve.org/CVERecord?id=CVE-2021-21611
nvd.nist.gov/vuln/detail/CVE-2021-21611
access.redhat.com/security/cve/CVE-2021-21615
cve.org/CVERecord?id=CVE-2021-21615
nvd.nist.gov/vuln/detail/CVE-2021-21615
jenkins.io/security/advisory/2021-01-26
access.redhat.com/errata/RHSA-2021:0429
bugzilla.redhat.com/show_bug.cgi?id=1925678
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0429.json
access.redhat.com/errata/RHSA-2021:0637
bugzilla.redhat.com/show_bug.cgi?id=1849003
bugzilla.redhat.com/show_bug.cgi?id=1873346
bugzilla.redhat.com/show_bug.cgi?id=1879407
bugzilla.redhat.com/show_bug.cgi?id=1889972
bugzilla.redhat.com/show_bug.cgi?id=1895939
bugzilla.redhat.com/show_bug.cgi?id=1895940
bugzilla.redhat.com/show_bug.cgi?id=1895941
bugzilla.redhat.com/show_bug.cgi?id=1895945
bugzilla.redhat.com/show_bug.cgi?id=1895946
bugzilla.redhat.com/show_bug.cgi?id=1895947
bugzilla.redhat.com/show_bug.cgi?id=1903699
bugzilla.redhat.com/show_bug.cgi?id=1918392
bugzilla.redhat.com/show_bug.cgi?id=1920567
bugzilla.redhat.com/show_bug.cgi?id=1921353
bugzilla.redhat.com/show_bug.cgi?id=1924614
bugzilla.redhat.com/show_bug.cgi?id=1924811
bugzilla.redhat.com/show_bug.cgi?id=1929170
bugzilla.redhat.com/show_bug.cgi?id=1929216
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0637.json
access.redhat.com/security/cve/CVE-2020-2304
cve.org/CVERecord?id=CVE-2020-2304
nvd.nist.gov/vuln/detail/CVE-2020-2304
jenkins.io/security/advisory/2020-11-04
access.redhat.com/security/cve/CVE-2020-2305
cve.org/CVERecord?id=CVE-2020-2305
nvd.nist.gov/vuln/detail/CVE-2020-2305
access.redhat.com/security/cve/CVE-2020-2306
cve.org/CVERecord?id=CVE-2020-2306
nvd.nist.gov/vuln/detail/CVE-2020-2306
access.redhat.com/security/cve/CVE-2020-2307
cve.org/CVERecord?id=CVE-2020-2307
nvd.nist.gov/vuln/detail/CVE-2020-2307
access.redhat.com/security/cve/CVE-2020-2308
cve.org/CVERecord?id=CVE-2020-2308
nvd.nist.gov/vuln/detail/CVE-2020-2308
access.redhat.com/security/cve/CVE-2020-2309
cve.org/CVERecord?id=CVE-2020-2309
nvd.nist.gov/vuln/detail/CVE-2020-2309
access.redhat.com/security/cve/CVE-2020-25658
cve.org/CVERecord?id=CVE-2020-25658
nvd.nist.gov/vuln/detail/CVE-2020-25658
github.com/sybrenstuvel/python-rsa/issues/165
access.redhat.com/errata/RHSA-2021:2437
bugzilla.redhat.com/show_bug.cgi?id=1918750
bugzilla.redhat.com/show_bug.cgi?id=1921650
bugzilla.redhat.com/show_bug.cgi?id=1937562
bugzilla.redhat.com/show_bug.cgi?id=1940489
bugzilla.redhat.com/show_bug.cgi?id=1947102
bugzilla.redhat.com/show_bug.cgi?id=1947105
bugzilla.redhat.com/show_bug.cgi?id=1954917
bugzilla.redhat.com/show_bug.cgi?id=1958407
bugzilla.redhat.com/show_bug.cgi?id=1959545
bugzilla.redhat.com/show_bug.cgi?id=1978621
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2437.json
access.redhat.com/security/cve/CVE-2021-3114
cve.org/CVERecord?id=CVE-2021-3114
nvd.nist.gov/vuln/detail/CVE-2021-3114
groups.google.com/g/golang-announce/c/mperVMGa98w
access.redhat.com/security/cve/CVE-2021-3121
cve.org/CVERecord?id=CVE-2021-3121
nvd.nist.gov/vuln/detail/CVE-2021-3121
access.redhat.com/security/cve/CVE-2021-3636
cve.org/CVERecord?id=CVE-2021-3636
nvd.nist.gov/vuln/detail/CVE-2021-3636
access.redhat.com/security/cve/CVE-2021-20291
bugzilla.redhat.com/show_bug.cgi?id=1939485
cve.org/CVERecord?id=CVE-2021-20291
nvd.nist.gov/vuln/detail/CVE-2021-20291
unit42.paloaltonetworks.com/cve-2021-20291
access.redhat.com/security/cve/CVE-2021-21419
cve.org/CVERecord?id=CVE-2021-21419
nvd.nist.gov/vuln/detail/CVE-2021-21419
access.redhat.com/security/cve/CVE-2021-21623
cve.org/CVERecord?id=CVE-2021-21623
nvd.nist.gov/vuln/detail/CVE-2021-21623
jenkins.io/security/advisory/2021-03-18
access.redhat.com/security/cve/CVE-2021-21639
cve.org/CVERecord?id=CVE-2021-21639
nvd.nist.gov/vuln/detail/CVE-2021-21639
access.redhat.com/security/cve/CVE-2021-21640
cve.org/CVERecord?id=CVE-2021-21640
nvd.nist.gov/vuln/detail/CVE-2021-21640
access.redhat.com/security/cve/CVE-2021-21642
bugzilla.redhat.com/show_bug.cgi?id=1952146
cve.org/CVERecord?id=CVE-2021-21642
nvd.nist.gov/vuln/detail/CVE-2021-21642
jenkins.io/security/advisory/2021-04-21
access.redhat.com/security/cve/CVE-2021-21643
bugzilla.redhat.com/show_bug.cgi?id=1952148
cve.org/CVERecord?id=CVE-2021-21643
nvd.nist.gov/vuln/detail/CVE-2021-21643
access.redhat.com/security/cve/CVE-2021-21644
bugzilla.redhat.com/show_bug.cgi?id=1952151
cve.org/CVERecord?id=CVE-2021-21644
nvd.nist.gov/vuln/detail/CVE-2021-21644
access.redhat.com/security/cve/CVE-2021-21645
bugzilla.redhat.com/show_bug.cgi?id=1952152
cve.org/CVERecord?id=CVE-2021-21645
nvd.nist.gov/vuln/detail/CVE-2021-21645
access.redhat.com/security/cve/CVE-2021-21648
cve.org/CVERecord?id=CVE-2021-21648
nvd.nist.gov/vuln/detail/CVE-2021-21648
jenkins.io/security/advisory/2021-05-11
access.redhat.com/security/cve/CVE-2021-25735
cve.org/CVERecord?id=CVE-2021-25735
nvd.nist.gov/vuln/detail/CVE-2021-25735
groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y
access.redhat.com/security/cve/CVE-2021-25737
cve.org/CVERecord?id=CVE-2021-25737
nvd.nist.gov/vuln/detail/CVE-2021-25737
github.com/kubernetes/kubernetes/issues/102106
groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY
access.redhat.com/security/cve/CVE-2021-30465
bugzilla.redhat.com/show_bug.cgi?id=1954736
access.redhat.com/security/vulnerabilities/RHSB-2021-004
cve.org/CVERecord?id=CVE-2021-30465
nvd.nist.gov/vuln/detail/CVE-2021-30465
github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
Left out here: 606 versions. The JSON record has them.