VDB
RHSA-2022%3A4863
RHSA-2022%3A4863
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the big package of the math library in golang. The Rat.SetString could cause an overflow, and if left unhandled, it could lead to excessive memory use. This issue could allow a remote attacker to impact the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-serverless-1/serverless-rhel8-operator@sha256:3d091371720926bf2de8a689d37e9fd6682ce35b6c8f69eff7c75c11d7ed2f84_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/serverless-rhel8-operator@sha256:3d091371720926bf2de8a689d37e9fd6682ce35b6c8f69eff7c75c11d7ed2f84_ppc64le |
| Red Hat | openshift-serverless-1/eventing-webhook-rhel8@sha256:8fac8e204b0e6cbc6baf9c755f91649d25e5343ceb149662dd232f69c0e835cb_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-webhook-rhel8@sha256:8fac8e204b0e6cbc6baf9c755f91649d25e5343ceb149662dd232f69c0e835cb_amd64 |
| Red Hat | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:bd2c0e98285a2a0a27b6e5a399543a81598d7c5a0cf9ff276398cffb77ce273a_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:bd2c0e98285a2a0a27b6e5a399543a81598d7c5a0cf9ff276398cffb77ce273a_ppc64le |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:50b46e131cdb5965e7e14167d7e75dd24d983bda07b0d3146251b6ba521dce7c_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:50b46e131cdb5965e7e14167d7e75dd24d983bda07b0d3146251b6ba521dce7c_ppc64le |
| Red Hat | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:eaee4aab21b402ce32d2b5335377da9f8940c997ef62822017124db7d6800b13_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:eaee4aab21b402ce32d2b5335377da9f8940c997ef62822017124db7d6800b13_s390x |
| Red Hat | openshift-serverless-1/net-istio-controller-rhel8@sha256:316f1d8b17465983c88d4841230025c11a27a7748f1d1bd784020cb10bc43d12_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/net-istio-controller-rhel8@sha256:316f1d8b17465983c88d4841230025c11a27a7748f1d1bd784020cb10bc43d12_s390x |
| Red Hat | openshift-serverless-1/serving-activator-rhel8@sha256:8d5f108280f217c9408f9337071173c5ef4af2288446069e566092c51515861c_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/serving-activator-rhel8@sha256:8d5f108280f217c9408f9337071173c5ef4af2288446069e566092c51515861c_amd64 |
| Red Hat | openshift-serverless-1/svls-must-gather-rhel8@sha256:de887422db1682cc883a328e65ede6199c6c5f541315bfb9e82678e2b8d973e6_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/svls-must-gather-rhel8@sha256:de887422db1682cc883a328e65ede6199c6c5f541315bfb9e82678e2b8d973e6_ppc64le |
| Red Hat | openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:e2dbfdca184ee7c24b1ab781c79d50196365509ccf29e75a8bdae172c25cb89c_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:e2dbfdca184ee7c24b1ab781c79d50196365509ccf29e75a8bdae172c25cb89c_amd64 |
| Red Hat | openshift-serverless-1/net-istio-webhook-rhel8@sha256:b0899eff691e0a5ceba7b508d11e5636737d1b321ea707a8ce560da13e3f1258_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/net-istio-webhook-rhel8@sha256:b0899eff691e0a5ceba7b508d11e5636737d1b321ea707a8ce560da13e3f1258_s390x |
| Red Hat | openshift-serverless-1/serving-queue-rhel8@sha256:87661f9af4b65a73dbd843bd53e6e01a549e88e5585a6a76c366d1eb0cf9f5f4_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/serving-queue-rhel8@sha256:87661f9af4b65a73dbd843bd53e6e01a549e88e5585a6a76c366d1eb0cf9f5f4_s390x |
| Red Hat | openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:40c2f4fd318e5e30fa9d0861ea8d1a09cba90a26e804759899f6da7a619a6e0d_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:40c2f4fd318e5e30fa9d0861ea8d1a09cba90a26e804759899f6da7a619a6e0d_s390x |
| Red Hat | openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:9ad693375f5277101bd626b3da55c53c714f17292c8a76a4baf2c41d44415fea_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:9ad693375f5277101bd626b3da55c53c714f17292c8a76a4baf2c41d44415fea_amd64 |
| Red Hat | openshift-serverless-1/net-istio-controller-rhel8@sha256:3b9ef4d21b73d908cace5a71d11b1addf5fdfb96e67ea60dee0d25b8e8a7b730_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/net-istio-controller-rhel8@sha256:3b9ef4d21b73d908cace5a71d11b1addf5fdfb96e67ea60dee0d25b8e8a7b730_ppc64le |
| Red Hat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:3797ad2e62cf51b2490d33148d43cda3644c5d91d44e21a01c69d779bc65773f_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:3797ad2e62cf51b2490d33148d43cda3644c5d91d44e21a01c69d779bc65773f_ppc64le |
| Red Hat | openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:3cb010dc63c37cecbc1aac3ddef7f55f6599273ae542833e20a9be1841ca0f8d_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:3cb010dc63c37cecbc1aac3ddef7f55f6599273ae542833e20a9be1841ca0f8d_amd64 |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:61389af27453badea9c150af6d9d36f92aef84bfaa8018436123f1c8ae82c873_s390x as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:61389af27453badea9c150af6d9d36f92aef84bfaa8018436123f1c8ae82c873_s390x |
| Red Hat | openshift-serverless-1/serving-controller-rhel8@sha256:e3f3d2dde217330016c70b71252b6aeae19669d4a13796aa8cb3bbe106ce0df1_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/serving-controller-rhel8@sha256:e3f3d2dde217330016c70b71252b6aeae19669d4a13796aa8cb3bbe106ce0df1_amd64 |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:a6350f212bd4259fe68597d5bddc8ea75493d25d24c17a0f8c25c3e967a33d48_ppc64le as a component of Red Hat OpenShift Serverless 1.22 | * |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:ae18f40cd882daed9127f64240f423050b1ed85e23831cbff4bcd7956db80cf4_amd64 as a component of Red Hat OpenShift Serverless 1.22 | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:ae18f40cd882daed9127f64240f423050b1ed85e23831cbff4bcd7956db80cf4_amd64 |
…and 92 more
Timeline
- Jun 1, 2022 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:4863 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2053429 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2053532 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2053541 issue
- https://issues.redhat.com/browse/SRVKE-1217 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4863.json advisory
- https://access.redhat.com/security/cve/CVE-2022-23772 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-23772 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-23772 advisory
- https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ advisory
- https://access.redhat.com/security/cve/CVE-2022-23773 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-23773 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-23773 advisory
- https://access.redhat.com/security/cve/CVE-2022-23806 advisory
…and 2 more