9.1
CVSSv3

CVE-2021-4238

Published: 27/12/2022 Updated: 05/01/2023
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

goutils project goutils

Vendor Advisories

DescriptionThe MITRE CVE dictionary describes this issue as: Randomly-generated alphanumeric strings contain significantly less entropy than expected The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9 This significantly reduces the amount of entropy in short strings genera ...
Synopsis Important: OpenShift Container Platform 41053 bug fix and security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41053 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift ...
Synopsis Important: OpenShift Container Platform 41131 security and extras update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41131 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift ...
Synopsis Important: OpenShift Container Platform 41128 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41128 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: OpenShift Container Platform 4122 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4122 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact ...
Synopsis Important: OpenShift Container Platform 41126 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41126 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: Red Hat OpenShift GitOps security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift GitOps 15Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed sever ...
Synopsis Important: OpenShift Container Platform 41051 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41051 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: Red Hat OpenShift GitOps security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift GitOps 17Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed sever ...
Synopsis Important: Red Hat OpenShift GitOps security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift GitOps 16Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed sever ...
Synopsis Important: OpenShift Container Platform 4123 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4123 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Container Pla ...
Synopsis Important: Red Hat OpenShift Data Foundation 4121 security bug fix update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Data Foundation 4121 Bug Fix UpdateRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which giv ...
Synopsis Important: OpenShift Container Platform 4124 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4124 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact ...
Synopsis Critical: OpenShift Container Platform 4955 security update Type/Severity Security Advisory: Critical Topic Red Hat OpenShift Container Platform release 4955 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact of ...
Synopsis Important: OpenShift Container Platform 41054 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41054 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: OpenShift Container Platform 4121 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4121 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact ...
Synopsis Important: Red Hat OpenShift Service Mesh 216 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Red Hat OpenShift Service Mesh 216Red Hat Product Security has rated this update as having a secur ...
Synopsis Important: OpenShift Container Platform 4128 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4128 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Container Pla ...
Synopsis Important: OpenShift Container Platform 41055 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41055 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: OpenShift Container Platform 41127 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41127 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Important: OpenShift Container Platform 41132 security and extras update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41132 is now available with updates to packages and images that fix several bugsThis release includes a security update for Red Hat OpenShift Container Platform 4 ...
Synopsis Important: Red Hat OpenShift Service Mesh 231 Containers security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Service Mesh 231 ContainersRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a deta ...
Synopsis Important: Red Hat OpenShift Data Foundation 4130 security and bug fix update Type/Severity Security Advisory: Important Topic Updated images that include numerous enhancements, security, and bug fixes are now available in Red Hat Container Registry for Red Hat OpenShift Data Foundation 4130 on Red Hat Enterprise Linux 9Red Hat ...

Github Repositories

Protect Go repos from CVE threats

GoGuard - Protect Go repos from CVE threats GoGuard is a tool that helps you protect your Go projects from known CVE threats It allows you to check if a given GitHub repository is vulnerable against a specific CVE How it works You provide GoGuard with a valid CVE (eg CVE-2021-4238) and a GitHub repository of a Go project (eg <githubcom/user/repo>)