VDB

RHSA-2022%3A0561

RHSA-2022%3A0561 PUBLISHED CVSS 7.300000190734863 HIGH

A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Risk Scores

CVSS 3.1
7.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:a4b728b68cffd3e560d8a6df110c9802886bafad7f2d521c841110b71d449f3c_amd64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:a4b728b68cffd3e560d8a6df110c9802886bafad7f2d521c841110b71d449f3c_amd64
Red Hatopenshift4/ose-kube-storage-version-migrator-rhel8@sha256:201025cab7436c677b77f4622e113fe982543764b4f6c77fde59bc1021f02cc7_arm64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-kube-storage-version-migrator-rhel8@sha256:201025cab7436c677b77f4622e113fe982543764b4f6c77fde59bc1021f02cc7_arm64
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:8dd696c9b347246805c439c8ddbaff245671e4c1ce59fb64d454d80b9fb75816_amd64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:8dd696c9b347246805c439c8ddbaff245671e4c1ce59fb64d454d80b9fb75816_amd64
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:40c3fe76a68d1ec45f080594911b8b7870a4372831914b17bb4ee0018bd8536e_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-csi-node-driver-registrar@sha256:40c3fe76a68d1ec45f080594911b8b7870a4372831914b17bb4ee0018bd8536e_s390x
Red Hatopenshift4/ose-cluster-dns-operator@sha256:34bab1a7e5a214bcec7e6f7a931b503233d70ef376ed3a682f6d89bd9de3002c_ppc64le as a component of Red Hat OpenShift Container Platform 4.9*
Red Hatopenshift4/ose-configmap-reloader@sha256:94d6df3f9440bee459a85ed8809fc33e626e37cb8f60f19ddda47b9b069a8daf_ppc64le as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-configmap-reloader@sha256:94d6df3f9440bee459a85ed8809fc33e626e37cb8f60f19ddda47b9b069a8daf_ppc64le, openshift4/ose-configmap-reloader@sha256:94d6df3f9440bee459a85ed8809fc33e626e37cb8f60f19ddda47b9b069a8daf_ppc64le
Red Hatopenshift4/ose-openstack-machine-controllers@sha256:800def8106663f711982ccce888c6f7a3640962632807fee641bc9d5ef9ef9df_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-openstack-machine-controllers@sha256:800def8106663f711982ccce888c6f7a3640962632807fee641bc9d5ef9ef9df_s390x, *
Red Hatopenshift4/ose-cluster-kube-apiserver-operator@sha256:a3703612c03564efec27352022bd3e0361c9b3eb9fdd5c6e7b438581f36ea2de_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-cluster-kube-apiserver-operator@sha256:a3703612c03564efec27352022bd3e0361c9b3eb9fdd5c6e7b438581f36ea2de_s390x, *
Red Hatopenshift4/ose-operator-marketplace@sha256:8e5d7a59aad19a3c94bdb58aa368e281a2a526567a0d6cd9218ea9cbc902f702_arm64 as a component of Red Hat OpenShift Container Platform 4.9*, openshift4/ose-operator-marketplace@sha256:8e5d7a59aad19a3c94bdb58aa368e281a2a526567a0d6cd9218ea9cbc902f702_arm64
Red Hatopenshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:cf58e098e5d32014fb975b56f1f9a94b1c766f5759e0ed4cb463e31ce3b5930f_ppc64le as a component of Red Hat OpenShift Container Platform 4.9*
Red Hatopenshift4/ose-machine-api-operator@sha256:68e55c9317a93be199dfdfd170ea5a45c2d0c9e847f422a73a4cf9a9ecb2e61f_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-machine-api-operator@sha256:68e55c9317a93be199dfdfd170ea5a45c2d0c9e847f422a73a4cf9a9ecb2e61f_s390x, openshift4/ose-machine-api-operator@sha256:68e55c9317a93be199dfdfd170ea5a45c2d0c9e847f422a73a4cf9a9ecb2e61f_s390x
Red Hatopenshift4/ose-cluster-machine-approver@sha256:cab50959555b1eb7bd8e4335000c62096d1d7ca9171c9713ad7664c7c89f181a_ppc64le as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-cluster-machine-approver@sha256:cab50959555b1eb7bd8e4335000c62096d1d7ca9171c9713ad7664c7c89f181a_ppc64le
Red Hatopenshift4/ose-cluster-kube-controller-manager-operator@sha256:c9ac0a947d393fc10610767fd068ead54b3a586cd44d87d78b8757077470116c_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-cluster-kube-controller-manager-operator@sha256:c9ac0a947d393fc10610767fd068ead54b3a586cd44d87d78b8757077470116c_s390x
Red Hatopenshift4/ose-mdns-publisher-rhel8@sha256:16df456870a4d0c8161f9c4add393ee9a93689facdeb0b298a768eb8d9ca658b_s390x as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-mdns-publisher-rhel8@sha256:16df456870a4d0c8161f9c4add393ee9a93689facdeb0b298a768eb8d9ca658b_s390x
Red Hatopenshift4/ose-cluster-openshift-apiserver-operator@sha256:dd208b9fddcbe685a018c21bdfffd8da69496ab3eaea2a799470b12e0010138d_amd64 as a component of Red Hat OpenShift Container Platform 4.9*
Red Hatopenshift4/ose-openstack-machine-controllers@sha256:df8b968602985abee1eb94110e7053d3e75250798f0a56c10f905b35793f7220_amd64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-openstack-machine-controllers@sha256:df8b968602985abee1eb94110e7053d3e75250798f0a56c10f905b35793f7220_amd64
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:fefe8184b66c7f06a97dd7cdb7a5c5ee8ebf2836af2c321cec786ac128302d3b_arm64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-csi-node-driver-registrar@sha256:fefe8184b66c7f06a97dd7cdb7a5c5ee8ebf2836af2c321cec786ac128302d3b_arm64
Red Hatopenshift4/ose-kube-state-metrics@sha256:f17aa987a4578af06f558a6172e714bac20cfaaceeb850bb88afde5c077a5434_amd64 as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-kube-state-metrics@sha256:f17aa987a4578af06f558a6172e714bac20cfaaceeb850bb88afde5c077a5434_amd64
Red Hatopenshift4/ose-machine-config-operator@sha256:8956a1963295a1c7b82292bd6408675524ac466fe5ae4b66ed0319036d15dc9c_ppc64le as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-machine-config-operator@sha256:8956a1963295a1c7b82292bd6408675524ac466fe5ae4b66ed0319036d15dc9c_ppc64le, *
Red Hatopenshift4/ose-cloud-credential-operator@sha256:40214ec88b95f5d8e9f249dfebdb7efc97c5234d1c7298b485b86420b95ac78b_ppc64le as a component of Red Hat OpenShift Container Platform 4.9openshift4/ose-cloud-credential-operator@sha256:40214ec88b95f5d8e9f249dfebdb7efc97c5234d1c7298b485b86420b95ac78b_ppc64le

…and 996 more

Timeline

  • Feb 23, 2022 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 29, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›