VDB
BDU%3A2022-05475
BDU%3A2022-05475
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость библиотеки client_golang приложения для мониторинга и оповещения о событиях Prometheus, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Fedora Project, Сообщество свободного программного обеспечения, Red Hat Inc., ООО «Ред Софт», IBM Corp., Prometheus Monitoring Community | SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, SUSE OpenStack Cloud, SUSE OpenStack Cloud Crowbar, SUSE Enterprise Storage, SUSE Linux Enterprise High Performance Computing, openSUSE Tumbleweed, SUSE CaaS Platform, Fedora, SUSE Linux Enterprise Module for Basesystem, SUSE Linux Enterprise Module for Desktop Applications, OpenSUSE Leap, Debian GNU/Linux, OpenShift Logging, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Micro, SUSE Manager Retail Branch Server, openSUSE Leap Micro, IBM Cloud Pak for Business, SUSE Linux Enterprise Module for Containers, client golang, OpenShift, SUSE Linux Enterprise Module for Package Hub, SUSE Manager Server Module, SUSE Liberty Linux, Elasticsearch exporter, SUSE Manager Client Tools, SUSE Manager Proxy Module, IBM Robotic Process Automation, SUSE Linux Micro |
Timeline
- Sep 2, 2022 CVE Published
- Sep 5, 2025 CVE Updated
References
- https://github.com/prometheus/client_golang/pull/962 url
- https://github.com/prometheus/client_golang/pull/987 url
- https://github.com/prometheus/client_golang/releases/tag/v1.11.1 url
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FY3N7H6VSDZM37B4SKM2PFFCUWU7QYWN/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KBMVIQFKQDSSTHVVJWJ4QH6TW3JVB7XZ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/ url
- https://www.ibm.com/support/pages/node/6614451 url
- https://www.ibm.com/support/pages/node/6596915 url
- https://safe-surf.ru/upload/VULN/VULN-20220621.2.pdf url
- https://github.com/prometheus-community/elasticsearch_exporter/releases/download/v1.3.0/elasticsearch_exporter-1.3.0.linux-amd64.tar.gz url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ url
- https://security-tracker.debian.org/tracker/CVE-2022-21698 url
- https://www.suse.com/security/cve/CVE-2022-21698.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IK53GWZ475OQ6ENABKMJMTOBZG6LXUR/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7V7I72LSQ3IET3QJR6QPAVGJZ4CBDLN5/ advisory
…and 7 more