VDB
RHSA-2022%3A6053
RHSA-2022%3A6053
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:45f14ebb4becae7b5a1168bc5d1cedf3ee0cd2516cdbe00fd2897a13fb326663_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-kube-apiserver-operator@sha256:45f14ebb4becae7b5a1168bc5d1cedf3ee0cd2516cdbe00fd2897a13fb326663_ppc64le, openshift4/ose-cluster-kube-apiserver-operator@sha256:45f14ebb4becae7b5a1168bc5d1cedf3ee0cd2516cdbe00fd2897a13fb326663_ppc64le, openshift4/ose-cluster-kube-apiserver-operator@sha256:45f14ebb4becae7b5a1168bc5d1cedf3ee0cd2516cdbe00fd2897a13fb326663_ppc64le |
| Red Hat | openshift4/ose-prometheus@sha256:4f71279e489fb52d03a97c5d3a303ad2def25754f3380fee6c5c62aa2e9418fa_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-prometheus@sha256:4f71279e489fb52d03a97c5d3a303ad2def25754f3380fee6c5c62aa2e9418fa_s390x, * |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:f71bf0b8d3d636fddd980630a57fa403428750837c605811964c02ca63b8981a_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/egress-router-cni-rhel8@sha256:f71bf0b8d3d636fddd980630a57fa403428750837c605811964c02ca63b8981a_amd64, *, * |
| Red Hat | openshift4/ose-machine-config-operator@sha256:5482b70bcbfaf2e2029ffb43119be0bfe219114377689edde1d2a1a0f4c84c54_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-machine-config-operator@sha256:5482b70bcbfaf2e2029ffb43119be0bfe219114377689edde1d2a1a0f4c84c54_amd64, openshift4/ose-machine-config-operator@sha256:5482b70bcbfaf2e2029ffb43119be0bfe219114377689edde1d2a1a0f4c84c54_amd64, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:8f3b38fb6b7323a699e001c4c8179655d029e7e9507c29c42b544020f7acb387_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-etcd-rhel8-operator@sha256:8f3b38fb6b7323a699e001c4c8179655d029e7e9507c29c42b544020f7acb387_s390x, openshift4/ose-cluster-etcd-rhel8-operator@sha256:8f3b38fb6b7323a699e001c4c8179655d029e7e9507c29c42b544020f7acb387_s390x, * |
| Red Hat | openshift4/ose-pod@sha256:c040a7c86911b8a70e648a6e4b293fd09869c7c15617408f07e75377839dd29d_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-pod@sha256:c040a7c86911b8a70e648a6e4b293fd09869c7c15617408f07e75377839dd29d_amd64, openshift4/ose-pod@sha256:c040a7c86911b8a70e648a6e4b293fd09869c7c15617408f07e75377839dd29d_amd64, * |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:4532633521448dfb8bd5d1dbc66e7df4292c6427a8edd41a37d8e644940e4f34_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/ose-cluster-autoscaler-operator@sha256:4532633521448dfb8bd5d1dbc66e7df4292c6427a8edd41a37d8e644940e4f34_ppc64le |
| Red Hat | openshift4/ose-multus-cni@sha256:45370a998038b1976561fd638fb6e72fe3cde2880190ab31230024ae89ffdb8c_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/ose-multus-cni@sha256:45370a998038b1976561fd638fb6e72fe3cde2880190ab31230024ae89ffdb8c_s390x |
| Red Hat | openshift4/ose-tests@sha256:03ccd7ec3932a87c4dcb392876bbfe0b8ea52e26df406093dc2cb031068c9dbb_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-tests@sha256:03ccd7ec3932a87c4dcb392876bbfe0b8ea52e26df406093dc2cb031068c9dbb_s390x, openshift4/ose-tests@sha256:03ccd7ec3932a87c4dcb392876bbfe0b8ea52e26df406093dc2cb031068c9dbb_s390x, openshift4/ose-tests@sha256:03ccd7ec3932a87c4dcb392876bbfe0b8ea52e26df406093dc2cb031068c9dbb_s390x |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:807287809b40577ade50449906bbf0f1007a337e9e97adc31f1b707f19233ddc_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:807287809b40577ade50449906bbf0f1007a337e9e97adc31f1b707f19233ddc_s390x, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:807287809b40577ade50449906bbf0f1007a337e9e97adc31f1b707f19233ddc_s390x, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:807287809b40577ade50449906bbf0f1007a337e9e97adc31f1b707f19233ddc_s390x |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:37033e0be4eac0f376eb2335db22c0b97ac191c83a4b2788e155f9aac223ba5f_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-cluster-etcd-rhel8-operator@sha256:37033e0be4eac0f376eb2335db22c0b97ac191c83a4b2788e155f9aac223ba5f_amd64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:37033e0be4eac0f376eb2335db22c0b97ac191c83a4b2788e155f9aac223ba5f_amd64 |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:7ae44240cf84488d1a6011509bc1bdcc403786862d70bbf6b48bbde4e644e7db_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-cluster-network-operator@sha256:7ae44240cf84488d1a6011509bc1bdcc403786862d70bbf6b48bbde4e644e7db_s390x, openshift4/ose-cluster-network-operator@sha256:7ae44240cf84488d1a6011509bc1bdcc403786862d70bbf6b48bbde4e644e7db_s390x |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:ae9c6eec4f1d1f1abd465607ae4492f666fc31d5ea2071bd8c106a581ec3957d_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:ae9c6eec4f1d1f1abd465607ae4492f666fc31d5ea2071bd8c106a581ec3957d_s390x, *, * |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:bfe0294882115863f152c6f6e3fd5f668e8bee7b5818d38d80b9b8a8c84d2390_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/driver-toolkit-rhel8@sha256:bfe0294882115863f152c6f6e3fd5f668e8bee7b5818d38d80b9b8a8c84d2390_s390x |
| Red Hat | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:94d0dee5f82f2af77b0b522bdecd4bc4beb94399a7fb54c268a2dbf8d5d9f13f_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:94d0dee5f82f2af77b0b522bdecd4bc4beb94399a7fb54c268a2dbf8d5d9f13f_s390x, openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:94d0dee5f82f2af77b0b522bdecd4bc4beb94399a7fb54c268a2dbf8d5d9f13f_s390x, openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:94d0dee5f82f2af77b0b522bdecd4bc4beb94399a7fb54c268a2dbf8d5d9f13f_s390x |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:1747564f23325c391d1d80e345d24b462ac876a75c5a1fb8652389f948d1d71f_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/ose-csi-external-resizer@sha256:1747564f23325c391d1d80e345d24b462ac876a75c5a1fb8652389f948d1d71f_s390x |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:ebfc59b917bd1a70b5cdf8860830eb6fbca2846027d58d3f98620143d610e28d_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-dns-operator@sha256:ebfc59b917bd1a70b5cdf8860830eb6fbca2846027d58d3f98620143d610e28d_ppc64le, *, * |
| Red Hat | openshift4/ose-openstack-machine-controllers@sha256:4c9fc09773f5d748e0e5db72bf3f67b3ccfc76923099559d41edbf6f51986bb7_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/ose-openstack-machine-controllers@sha256:4c9fc09773f5d748e0e5db72bf3f67b3ccfc76923099559d41edbf6f51986bb7_amd64 |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:f7234e6b37b1b6a8a364ea523bb58ef5a0ed6bbe6c233ff6fe781c05f06e44d0_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, *, openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:f7234e6b37b1b6a8a364ea523bb58ef5a0ed6bbe6c233ff6fe781c05f06e44d0_amd64 |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:172e56fa30eda92d39a98d96a9479b54ea8f625c503db8299de425561f0f46d1_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-image-registry-operator@sha256:172e56fa30eda92d39a98d96a9479b54ea8f625c503db8299de425561f0f46d1_amd64, openshift4/ose-cluster-image-registry-operator@sha256:172e56fa30eda92d39a98d96a9479b54ea8f625c503db8299de425561f0f46d1_amd64, openshift4/ose-cluster-image-registry-operator@sha256:172e56fa30eda92d39a98d96a9479b54ea8f625c503db8299de425561f0f46d1_amd64 |
…and 772 more
Timeline
- Aug 22, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jun 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6053 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2056342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2103217 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6053.json advisory
- https://access.redhat.com/security/cve/CVE-2022-30631 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30631 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-30631 advisory
- https://go.dev/issue/53168 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory