VDB
RHSA-2022%3A1396
RHSA-2022%3A1396
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A race condition flaw was found in Go. The incoming requests body weren't closed after the handler panic and as a consequence this could lead to ReverseProxy crash. The highest threat from this vulnerability is to Availability.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:6d8a470212f5cc3874179a518e6c9c08ba475d1cba7bbbeef7963626713225bb_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:6d8a470212f5cc3874179a518e6c9c08ba475d1cba7bbbeef7963626713225bb_amd64, rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:6d8a470212f5cc3874179a518e6c9c08ba475d1cba7bbbeef7963626713225bb_amd64 |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:c81788923374059acb3d290bae20f7b6d5ecfc28ee2fc770bd932250d20f0f1c_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-log-reader-rhel8@sha256:c81788923374059acb3d290bae20f7b6d5ecfc28ee2fc770bd932250d20f0f1c_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:6d8a470212f5cc3874179a518e6c9c08ba475d1cba7bbbeef7963626713225bb_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:6d8a470212f5cc3874179a518e6c9c08ba475d1cba7bbbeef7963626713225bb_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:7d8a05eb7c8fce2cbb2e51dbdaeca9dbef64198ff3748d7e71c1e257ec5bb785_amd64 as a component of 8Base-RHMTC-1.5 | *, * |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:7d8a05eb7c8fce2cbb2e51dbdaeca9dbef64198ff3748d7e71c1e257ec5bb785_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-ui-rhel8@sha256:7d8a05eb7c8fce2cbb2e51dbdaeca9dbef64198ff3748d7e71c1e257ec5bb785_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:bb83597c32f91485e447a7ca6331a0b4ce51f18b6938f075444a22953fab8f22_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-registry-rhel8@sha256:bb83597c32f91485e447a7ca6331a0b4ce51f18b6938f075444a22953fab8f22_amd64 |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:c81788923374059acb3d290bae20f7b6d5ecfc28ee2fc770bd932250d20f0f1c_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-log-reader-rhel8@sha256:c81788923374059acb3d290bae20f7b6d5ecfc28ee2fc770bd932250d20f0f1c_amd64, rhmtc/openshift-migration-log-reader-rhel8@sha256:c81788923374059acb3d290bae20f7b6d5ecfc28ee2fc770bd932250d20f0f1c_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:a88f4dd942dfa590def7b212fc55ec7a98626fe6a73c92cf43e62e7d2ffcafa1_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:a88f4dd942dfa590def7b212fc55ec7a98626fe6a73c92cf43e62e7d2ffcafa1_amd64, rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:a88f4dd942dfa590def7b212fc55ec7a98626fe6a73c92cf43e62e7d2ffcafa1_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:5dd4cd51ff2c5fc083cdd737c479934fab830631d6fabd048e307f5b7485d2a8_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:5dd4cd51ff2c5fc083cdd737c479934fab830631d6fabd048e307f5b7485d2a8_amd64, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:5dd4cd51ff2c5fc083cdd737c479934fab830631d6fabd048e307f5b7485d2a8_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:bb83597c32f91485e447a7ca6331a0b4ce51f18b6938f075444a22953fab8f22_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-registry-rhel8@sha256:bb83597c32f91485e447a7ca6331a0b4ce51f18b6938f075444a22953fab8f22_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:bb83597c32f91485e447a7ca6331a0b4ce51f18b6938f075444a22953fab8f22_amd64 |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:7769f009c41bb20a74440b81dded27e7b5e0127a3bbaa95478bf9e9f4c2a0efb_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:7769f009c41bb20a74440b81dded27e7b5e0127a3bbaa95478bf9e9f4c2a0efb_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:2aea8cea5a9c68a1d9b140d92fe754199ed6cb3ad60bde1d6b05f699708de673_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-controller-rhel8@sha256:2aea8cea5a9c68a1d9b140d92fe754199ed6cb3ad60bde1d6b05f699708de673_amd64, rhmtc/openshift-migration-controller-rhel8@sha256:2aea8cea5a9c68a1d9b140d92fe754199ed6cb3ad60bde1d6b05f699708de673_amd64 |
| Red Hat | rhmtc/openshift-velero-plugin-rhel8@sha256:501e981baae92b9afca62851c61dfdc04e71920b7a350f6dac3e257ab83ec9e6_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-velero-plugin-rhel8@sha256:501e981baae92b9afca62851c61dfdc04e71920b7a350f6dac3e257ab83ec9e6_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:5160ff9df003a434ccb359bc4422657398fcac2350864b32653d74838878601c_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:5160ff9df003a434ccb359bc4422657398fcac2350864b32653d74838878601c_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:2b0cac991e694f4521e0181ff67046c0a8c53ecafceb60c2d25025c70a999715_amd64 as a component of 7Server-RHMTC-1.5 | * |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:5160ff9df003a434ccb359bc4422657398fcac2350864b32653d74838878601c_amd64 as a component of 8Base-RHMTC-1.5 | *, * |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:2aea8cea5a9c68a1d9b140d92fe754199ed6cb3ad60bde1d6b05f699708de673_amd64 as a component of 8Base-RHMTC-1.5 | * |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:7769f009c41bb20a74440b81dded27e7b5e0127a3bbaa95478bf9e9f4c2a0efb_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:7769f009c41bb20a74440b81dded27e7b5e0127a3bbaa95478bf9e9f4c2a0efb_amd64, rhmtc/openshift-migration-legacy-rhel8-operator@sha256:7769f009c41bb20a74440b81dded27e7b5e0127a3bbaa95478bf9e9f4c2a0efb_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:5dd4cd51ff2c5fc083cdd737c479934fab830631d6fabd048e307f5b7485d2a8_amd64 as a component of 8Base-RHMTC-1.5 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:5dd4cd51ff2c5fc083cdd737c479934fab830631d6fabd048e307f5b7485d2a8_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:2b0cac991e694f4521e0181ff67046c0a8c53ecafceb60c2d25025c70a999715_amd64 as a component of 7Server-RHMTC-1.5 | rhmtc/openshift-migration-operator-bundle@sha256:2b0cac991e694f4521e0181ff67046c0a8c53ecafceb60c2d25025c70a999715_amd64, rhmtc/openshift-migration-operator-bundle@sha256:2b0cac991e694f4521e0181ff67046c0a8c53ecafceb60c2d25025c70a999715_amd64 |
…and 8 more
Timeline
- Apr 19, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:1396 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1995656 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1396.json advisory
- https://access.redhat.com/security/cve/CVE-2021-36221 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-36221 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-36221 advisory
- https://groups.google.com/g/golang-announce/c/uHACNfXAZqk advisory