VDB
RHSA-2022%3A6103
RHSA-2022%3A6103
PUBLISHED
CVSS 3.0999999046325684 LOW
A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption.
Risk Scores
CVSS 3.1
3.0999999046325684
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kuryr-controller-rhel8@sha256:0f66b211011375a203597f2a524314d9e05319db80f5e22fd78619eebed98ea0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-kuryr-controller-rhel8@sha256:0f66b211011375a203597f2a524314d9e05319db80f5e22fd78619eebed98ea0_ppc64le, *, * |
| Red Hat | openshift4/ose-console@sha256:773182d61251834f80c36cebf472dbff70025334977ecc416560e55a41a9e8c7_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-console@sha256:773182d61251834f80c36cebf472dbff70025334977ecc416560e55a41a9e8c7_s390x, openshift4/ose-console@sha256:773182d61251834f80c36cebf472dbff70025334977ecc416560e55a41a9e8c7_s390x, openshift4/ose-console@sha256:773182d61251834f80c36cebf472dbff70025334977ecc416560e55a41a9e8c7_s390x |
| Red Hat | openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:3bba6cbcd88668aba5ae03625d7cddea1bea0dc0e80007f9ba0f48efd9ab7cf7_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:3bba6cbcd88668aba5ae03625d7cddea1bea0dc0e80007f9ba0f48efd9ab7cf7_amd64, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:3bba6cbcd88668aba5ae03625d7cddea1bea0dc0e80007f9ba0f48efd9ab7cf7_amd64, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:3bba6cbcd88668aba5ae03625d7cddea1bea0dc0e80007f9ba0f48efd9ab7cf7_amd64 |
| Red Hat | openshift4/ose-coredns@sha256:58a52e4a3e0336391d21cf60c29dbede81e0a4a0dd27d54caa8c8107d4071da4_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-coredns@sha256:58a52e4a3e0336391d21cf60c29dbede81e0a4a0dd27d54caa8c8107d4071da4_s390x, *, * |
| Red Hat | openshift4/ose-baremetal-machine-controllers@sha256:092186662282ca09b701f0e198faf403905315190a1f1bcfdaf952ee0012f2f7_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-baremetal-machine-controllers@sha256:092186662282ca09b701f0e198faf403905315190a1f1bcfdaf952ee0012f2f7_s390x, openshift4/ose-baremetal-machine-controllers@sha256:092186662282ca09b701f0e198faf403905315190a1f1bcfdaf952ee0012f2f7_s390x, openshift4/ose-baremetal-machine-controllers@sha256:092186662282ca09b701f0e198faf403905315190a1f1bcfdaf952ee0012f2f7_s390x |
| Red Hat | openshift4/ose-service-ca-operator@sha256:bcdbf3cb8e6e31b66d979055c7ad71ff5d9fa309ba3c35256acdbe51c9f43de5_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-service-ca-operator@sha256:bcdbf3cb8e6e31b66d979055c7ad71ff5d9fa309ba3c35256acdbe51c9f43de5_amd64, *, openshift4/ose-service-ca-operator@sha256:bcdbf3cb8e6e31b66d979055c7ad71ff5d9fa309ba3c35256acdbe51c9f43de5_amd64 |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c0a3c993a9fcf0d645dec39a20464688837e35c82c08f5ca95fdf1b70d842806_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c0a3c993a9fcf0d645dec39a20464688837e35c82c08f5ca95fdf1b70d842806_ppc64le, openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:c0a3c993a9fcf0d645dec39a20464688837e35c82c08f5ca95fdf1b70d842806_ppc64le, * |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:5ce3526bde097d1550a02fbeeaea6822d7c885cbac4f757cdafe138dd968d489_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:5ce3526bde097d1550a02fbeeaea6822d7c885cbac4f757cdafe138dd968d489_amd64, * |
| Red Hat | openshift4/ose-oauth-proxy@sha256:1ce1cdcefa33cff869b553f7c1b03913d22495a8a66bb627a38a613f8bcbad26_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-oauth-proxy@sha256:1ce1cdcefa33cff869b553f7c1b03913d22495a8a66bb627a38a613f8bcbad26_arm64, *, openshift4/ose-oauth-proxy@sha256:1ce1cdcefa33cff869b553f7c1b03913d22495a8a66bb627a38a613f8bcbad26_arm64 |
| Red Hat | openshift4/ose-ironic-rhel8@sha256:5d630326f2961c8168d862a1341f27085ce928f8454b94d117208b5cd9b281ed_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ironic-rhel8@sha256:5d630326f2961c8168d862a1341f27085ce928f8454b94d117208b5cd9b281ed_amd64, *, openshift4/ose-ironic-rhel8@sha256:5d630326f2961c8168d862a1341f27085ce928f8454b94d117208b5cd9b281ed_amd64 |
| Red Hat | openshift4/ose-cluster-capi-rhel8-operator@sha256:47b12ea0b5c2e762e67c9b88a4a85b1a99bffd445643056658462e7cc1caab18_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:df368de69ad5d36f8a08efe36cd3191660c1e71f04e8a567a2958c7068a0ccea_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, * |
| Red Hat | openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:0161cffc939ea87d47ef654f287b14cb7551333731870dbd6e2232c5875b9033_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:0161cffc939ea87d47ef654f287b14cb7551333731870dbd6e2232c5875b9033_amd64, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:0161cffc939ea87d47ef654f287b14cb7551333731870dbd6e2232c5875b9033_amd64, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:0161cffc939ea87d47ef654f287b14cb7551333731870dbd6e2232c5875b9033_amd64 |
| Red Hat | openshift4/ose-image-customization-controller-rhel8@sha256:f1d87fa6ba341455ae0817bdc9d24840b59158d9b1e51663768c557be9ee7268_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-image-customization-controller-rhel8@sha256:f1d87fa6ba341455ae0817bdc9d24840b59158d9b1e51663768c557be9ee7268_arm64, openshift4/ose-image-customization-controller-rhel8@sha256:f1d87fa6ba341455ae0817bdc9d24840b59158d9b1e51663768c557be9ee7268_arm64, openshift4/ose-image-customization-controller-rhel8@sha256:f1d87fa6ba341455ae0817bdc9d24840b59158d9b1e51663768c557be9ee7268_arm64 |
| Red Hat | openshift4/ose-tests@sha256:a5de772af9f66abc7b9f80a650ac51b70ec040cf331773c71d817a389c999144_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-tests@sha256:a5de772af9f66abc7b9f80a650ac51b70ec040cf331773c71d817a389c999144_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:0d876f138cb07c4cf25bc0161041f92a25a81637367815ab20c8ac30e11d7f0a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/driver-toolkit-rhel8@sha256:0d876f138cb07c4cf25bc0161041f92a25a81637367815ab20c8ac30e11d7f0a_ppc64le, openshift4/driver-toolkit-rhel8@sha256:0d876f138cb07c4cf25bc0161041f92a25a81637367815ab20c8ac30e11d7f0a_ppc64le |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:d68705bb7994ea06b999f68001837638d901e2ac3677324b41ef45c140637ee7_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:d68705bb7994ea06b999f68001837638d901e2ac3677324b41ef45c140637ee7_arm64 |
| Red Hat | openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:7aefec5230cd316684b716b1051589f9ec2c9cf2e1447f039abf7e5d46a5dd8c_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:7aefec5230cd316684b716b1051589f9ec2c9cf2e1447f039abf7e5d46a5dd8c_amd64, *, * |
| Red Hat | openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:a8fb8135d0f3d2f666825d8a696973347f08238122e69951f17cce39d4287040_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, *, openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:a8fb8135d0f3d2f666825d8a696973347f08238122e69951f17cce39d4287040_amd64 |
| Red Hat | openshift4/ose-operator-registry@sha256:5eb15d8d2b50adc82d64bc4195f37148d2bc74a7fe208edc51300b2a845fe980_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-registry@sha256:5eb15d8d2b50adc82d64bc4195f37148d2bc74a7fe208edc51300b2a845fe980_s390x, *, openshift4/ose-operator-registry@sha256:5eb15d8d2b50adc82d64bc4195f37148d2bc74a7fe208edc51300b2a845fe980_s390x |
…and 1206 more
Timeline
- Aug 23, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jun 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6103 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2033256 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2040715 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2063622 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2092793 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2102576 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2103638 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2103899 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2104386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2104435 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2104510 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2104687 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2105056 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2105444 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2106772 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2106795 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107003 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107045 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
…and 54 more