VDB
RHSA-2022%3A6040
RHSA-2022%3A6040
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-serverless-1/serverless-rhel8-operator@sha256:26d940bd43b928d8370c9e88e80726a427c3f0ce3afc4fddb02a507f81c8fc93_amd64 as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/serverless-rhel8-operator@sha256:26d940bd43b928d8370c9e88e80726a427c3f0ce3afc4fddb02a507f81c8fc93_amd64, openshift-serverless-1/serverless-rhel8-operator@sha256:26d940bd43b928d8370c9e88e80726a427c3f0ce3afc4fddb02a507f81c8fc93_amd64, openshift-serverless-1/serverless-rhel8-operator@sha256:26d940bd43b928d8370c9e88e80726a427c3f0ce3afc4fddb02a507f81c8fc93_amd64 |
| Red Hat | openshift-serverless-1/net-istio-webhook-rhel8@sha256:4f7cabd5a6bb6fd7a0d81461108891b0d2de55efe868c4fbf275131c3280ed2d_s390x as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/net-istio-webhook-rhel8@sha256:4f7cabd5a6bb6fd7a0d81461108891b0d2de55efe868c4fbf275131c3280ed2d_s390x, openshift-serverless-1/net-istio-webhook-rhel8@sha256:4f7cabd5a6bb6fd7a0d81461108891b0d2de55efe868c4fbf275131c3280ed2d_s390x, openshift-serverless-1/net-istio-webhook-rhel8@sha256:4f7cabd5a6bb6fd7a0d81461108891b0d2de55efe868c4fbf275131c3280ed2d_s390x |
| Red Hat | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:63dab761fd3a2e08950b7ee52852fb39cef7820f2a8cf8142ec3701a07372d7c_s390x as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:63dab761fd3a2e08950b7ee52852fb39cef7820f2a8cf8142ec3701a07372d7c_s390x, *, openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:63dab761fd3a2e08950b7ee52852fb39cef7820f2a8cf8142ec3701a07372d7c_s390x |
| Red Hat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8057fa6657c0bf909297273acc4faea1cddb29f9f02f6c797279adb42f083332_amd64 as a component of Red Hat OpenShift Serverless 1.24 | *, openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8057fa6657c0bf909297273acc4faea1cddb29f9f02f6c797279adb42f083332_amd64, openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8057fa6657c0bf909297273acc4faea1cddb29f9f02f6c797279adb42f083332_amd64 |
| Red Hat | openshift-serverless-1/serving-controller-rhel8@sha256:92b01a8421488e9d9b42b6da290873b54a2619d39a05e8d2a99e4c5348a3d4dc_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | *, *, * |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:6d4a898f37f87aa6db636487c6892833249be38635fe631433652feda762a40e_s390x as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:6d4a898f37f87aa6db636487c6892833249be38635fe631433652feda762a40e_s390x, *, openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:6d4a898f37f87aa6db636487c6892833249be38635fe631433652feda762a40e_s390x |
| Red Hat | openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:a26dfc1a610bbaf876443b4b01a04130f7c0aba4d40e246333fe8bf7eb899f45_amd64 as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:a26dfc1a610bbaf876443b4b01a04130f7c0aba4d40e246333fe8bf7eb899f45_amd64, openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:a26dfc1a610bbaf876443b4b01a04130f7c0aba4d40e246333fe8bf7eb899f45_amd64, openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:a26dfc1a610bbaf876443b4b01a04130f7c0aba4d40e246333fe8bf7eb899f45_amd64 |
| Red Hat | openshift-serverless-1/eventing-webhook-rhel8@sha256:11d0b8fac4cb67c95e051a91f5c6683768f8969ffc744cd3cc4814d1ee6e91c1_amd64 as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-webhook-rhel8@sha256:11d0b8fac4cb67c95e051a91f5c6683768f8969ffc744cd3cc4814d1ee6e91c1_amd64, openshift-serverless-1/eventing-webhook-rhel8@sha256:11d0b8fac4cb67c95e051a91f5c6683768f8969ffc744cd3cc4814d1ee6e91c1_amd64, openshift-serverless-1/eventing-webhook-rhel8@sha256:11d0b8fac4cb67c95e051a91f5c6683768f8969ffc744cd3cc4814d1ee6e91c1_amd64 |
| Red Hat | openshift-serverless-1/serving-queue-rhel8@sha256:f16b4f4e86e758354c8b19ee3a075dfd6fd19eb7ba282ad8293d41ca0c8f3028_amd64 as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/serving-queue-rhel8@sha256:f16b4f4e86e758354c8b19ee3a075dfd6fd19eb7ba282ad8293d41ca0c8f3028_amd64, openshift-serverless-1/serving-queue-rhel8@sha256:f16b4f4e86e758354c8b19ee3a075dfd6fd19eb7ba282ad8293d41ca0c8f3028_amd64, openshift-serverless-1/serving-queue-rhel8@sha256:f16b4f4e86e758354c8b19ee3a075dfd6fd19eb7ba282ad8293d41ca0c8f3028_amd64 |
| Red Hat | openshift-serverless-1/ingress-rhel8-operator@sha256:46a5fb2d0f9fa5e05504b9264a3f1c0e7c7beb76e3a3aeb9bc036cda4fa9d66a_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/ingress-rhel8-operator@sha256:46a5fb2d0f9fa5e05504b9264a3f1c0e7c7beb76e3a3aeb9bc036cda4fa9d66a_ppc64le, openshift-serverless-1/ingress-rhel8-operator@sha256:46a5fb2d0f9fa5e05504b9264a3f1c0e7c7beb76e3a3aeb9bc036cda4fa9d66a_ppc64le, openshift-serverless-1/ingress-rhel8-operator@sha256:46a5fb2d0f9fa5e05504b9264a3f1c0e7c7beb76e3a3aeb9bc036cda4fa9d66a_ppc64le |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x, openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x, openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x |
| Red Hat | openshift-serverless-1/client-kn-rhel8@sha256:f9bf2892123c3d981d2d5f158e643e6ba6f59a441b47c4055dc542f8cf8330c0_s390x as a component of Red Hat OpenShift Serverless 1.24 | *, *, openshift-serverless-1/client-kn-rhel8@sha256:f9bf2892123c3d981d2d5f158e643e6ba6f59a441b47c4055dc542f8cf8330c0_s390x |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:070f2c819506853dee230f37e00b27a05ba01c6f7cbbffc9a04b59a65d0c45e9_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:070f2c819506853dee230f37e00b27a05ba01c6f7cbbffc9a04b59a65d0c45e9_ppc64le, openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:070f2c819506853dee230f37e00b27a05ba01c6f7cbbffc9a04b59a65d0c45e9_ppc64le, openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:070f2c819506853dee230f37e00b27a05ba01c6f7cbbffc9a04b59a65d0c45e9_ppc64le |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:10ba81e103ed6b7dff7b02394b20f44b46acd6b09d72f16667c068eb9989dc77_s390x as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:10ba81e103ed6b7dff7b02394b20f44b46acd6b09d72f16667c068eb9989dc77_s390x, openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:10ba81e103ed6b7dff7b02394b20f44b46acd6b09d72f16667c068eb9989dc77_s390x, * |
| Red Hat | openshift-serverless-1/serverless-rhel8-operator@sha256:8ec9e756969c8e6bf8155ed102a66cf578a325dcc477ff909b4806405ab59cfc_s390x as a component of Red Hat OpenShift Serverless 1.24 | *, *, openshift-serverless-1/serverless-rhel8-operator@sha256:8ec9e756969c8e6bf8155ed102a66cf578a325dcc477ff909b4806405ab59cfc_s390x |
| Red Hat | openshift-serverless-1/serving-webhook-rhel8@sha256:dc902a39bc520abcf2100c26e2e1c4ba20aa5aadff763b40f234eb01a26b6f77_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/serving-webhook-rhel8@sha256:dc902a39bc520abcf2100c26e2e1c4ba20aa5aadff763b40f234eb01a26b6f77_ppc64le, *, openshift-serverless-1/serving-webhook-rhel8@sha256:dc902a39bc520abcf2100c26e2e1c4ba20aa5aadff763b40f234eb01a26b6f77_ppc64le |
| Red Hat | openshift-serverless-1/serving-autoscaler-rhel8@sha256:c60796d720141d322159e49bb3496732b8e0453d6606227b419caf93a12d196b_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/serving-autoscaler-rhel8@sha256:c60796d720141d322159e49bb3496732b8e0453d6606227b419caf93a12d196b_ppc64le, openshift-serverless-1/serving-autoscaler-rhel8@sha256:c60796d720141d322159e49bb3496732b8e0453d6606227b419caf93a12d196b_ppc64le, * |
| Red Hat | openshift-serverless-1/eventing-webhook-rhel8@sha256:bf8c9de32dd5cbe536b115f52f32c666fbf886bde555ac355937d6b149cf9343_ppc64le as a component of Red Hat OpenShift Serverless 1.24 | openshift-serverless-1/eventing-webhook-rhel8@sha256:bf8c9de32dd5cbe536b115f52f32c666fbf886bde555ac355937d6b149cf9343_ppc64le, *, openshift-serverless-1/eventing-webhook-rhel8@sha256:bf8c9de32dd5cbe536b115f52f32c666fbf886bde555ac355937d6b149cf9343_ppc64le |
| Red Hat | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:1a51a072d4e303a5c33b2383c843308d86c68de228b094d2efed8bc59a4bac14_s390x as a component of Red Hat OpenShift Serverless 1.24 | *, openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:1a51a072d4e303a5c33b2383c843308d86c68de228b094d2efed8bc59a4bac14_s390x, openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:1a51a072d4e303a5c33b2383c843308d86c68de228b094d2efed8bc59a4bac14_s390x |
| Red Hat | openshift-serverless-1/serving-domain-mapping-rhel8@sha256:4e580d29cbff1aa6050c65cee35a870dab9e6a7eaa538b356a5afefed9c38d90_amd64 as a component of Red Hat OpenShift Serverless 1.24 | *, *, openshift-serverless-1/serving-domain-mapping-rhel8@sha256:4e580d29cbff1aa6050c65cee35a870dab9e6a7eaa538b356a5afefed9c38d90_amd64 |
…and 205 more
Timeline
- Aug 10, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:6040 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index advisory
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2064857 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2077688 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2077689 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2092793 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2094982 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107371 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107374 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107376 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107383 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107388 issue
…and 62 more