VDB

RHSA-2022%3A6287

RHSA-2022%3A6287 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-baremetal-operator-rhel8@sha256:1aba53716175635facf03822c8f6fcdbc804e658dea4091729951a5e395b602c_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1aba53716175635facf03822c8f6fcdbc804e658dea4091729951a5e395b602c_arm64
Red Hatopenshift4/ose-hyperkube@sha256:5390c2d30ca64d4a8e27f44a2218321204f9c06df774f87fe216f5cf85d92eb1_s390x as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-hyperkube@sha256:5390c2d30ca64d4a8e27f44a2218321204f9c06df774f87fe216f5cf85d92eb1_s390x
Red Hatopenshift4/ose-cli@sha256:29a43d973cad012096ab18898588166c5c6e432ef43d645a04ca9864514adfeb_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cli@sha256:29a43d973cad012096ab18898588166c5c6e432ef43d645a04ca9864514adfeb_arm64
Red Hatopenshift4/ose-cli-artifacts@sha256:1ee101cf849954032218dd5c983a420e39a86590b129ba0f8a303588cdc76d42_ppc64le as a component of Red Hat OpenShift Container Platform 4.11*
Red Hatopenshift4/ose-cluster-kube-apiserver-operator@sha256:f459dc2c08b40bfe789f0559fa1581e0c6de50e82c53753189f95663b978c0de_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cluster-kube-apiserver-operator@sha256:f459dc2c08b40bfe789f0559fa1581e0c6de50e82c53753189f95663b978c0de_arm64
Red Hatopenshift4/ose-csi-external-snapshotter@sha256:928716ddf1fce4a5a9cb729dbc6b32df6aabb296b2cf6ac3d63c2b0d5ef24dde_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-csi-external-snapshotter@sha256:928716ddf1fce4a5a9cb729dbc6b32df6aabb296b2cf6ac3d63c2b0d5ef24dde_arm64
Red Hatopenshift4/ose-kube-storage-version-migrator-rhel8@sha256:9e0ef556c2d18e0942d7338d7801717892ee44922286f1d7b3fad36acddd5d13_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-kube-storage-version-migrator-rhel8@sha256:9e0ef556c2d18e0942d7338d7801717892ee44922286f1d7b3fad36acddd5d13_arm64
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:c13b7cd3611025fa088e8af0e75bec8e314d746e4689323d6ea59673ee3b9a22_amd64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-csi-external-resizer-rhel8@sha256:c13b7cd3611025fa088e8af0e75bec8e314d746e4689323d6ea59673ee3b9a22_amd64
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:ab94d4d6ff4f5438a8b4322ed4c04188901ede8a83242f6623f8cd98a26d228d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-csi-external-resizer-rhel8@sha256:ab94d4d6ff4f5438a8b4322ed4c04188901ede8a83242f6623f8cd98a26d228d_ppc64le
Red Hatopenshift4/ose-sriov-network-operator@sha256:e0e102c9bfdfa4ee95b397359757cc95811e1215bbdf740a70d548aaf9d9876f_amd64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-sriov-network-operator@sha256:e0e102c9bfdfa4ee95b397359757cc95811e1215bbdf740a70d548aaf9d9876f_amd64
Red Hatopenshift4/ose-cluster-version-operator@sha256:8c377531623341047fe1850912952948e300614c864f708b1972100e7024f505_ppc64le as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cluster-version-operator@sha256:8c377531623341047fe1850912952948e300614c864f708b1972100e7024f505_ppc64le
Red Hatopenshift4/ose-ovn-kubernetes@sha256:d2a75a9058c4953000f2e91425b3e0869a0aa552324be1de0890b2582a111ece_arm64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-ovn-kubernetes@sha256:d2a75a9058c4953000f2e91425b3e0869a0aa552324be1de0890b2582a111ece_arm64
Red Hatopenshift4/ose-operator-lifecycle-manager@sha256:571c8cad29fc25c59a879b15c1bc36e21c73bff9ebe16a081fdef20dfb374f12_ppc64le as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-operator-lifecycle-manager@sha256:571c8cad29fc25c59a879b15c1bc36e21c73bff9ebe16a081fdef20dfb374f12_ppc64le
Red Hatopenshift4/ose-pod@sha256:abc24774015c7946518acfc42a4603543c3ed2a8a91bc896c3087c182ee1826a_amd64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-pod@sha256:abc24774015c7946518acfc42a4603543c3ed2a8a91bc896c3087c182ee1826a_amd64
Red Hatopenshift4/ose-cluster-capi-operator-container-rhel8@sha256:70401ec018a3abc75325eba201cf4637f922506131206f60170e7b815a4cd8cf_s390x as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cluster-capi-operator-container-rhel8@sha256:70401ec018a3abc75325eba201cf4637f922506131206f60170e7b815a4cd8cf_s390x
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:0f63d402bd7da4566b29b30379468948327dd76821ebc0cf415ecc7d83f2690a_s390x as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-apiserver-network-proxy-rhel8@sha256:0f63d402bd7da4566b29b30379468948327dd76821ebc0cf415ecc7d83f2690a_s390x
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:805fda2e8f15111fd6f090bc9f5664b6aee61baa2f20cba196ed832cb45f64bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.11*
Red Hatopenshift4/ose-cluster-bootstrap@sha256:a39942ddfabea973d94cdb265a2175680135d9d53d2fe561cf3e4d9104ac8dfd_amd64 as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-cluster-bootstrap@sha256:a39942ddfabea973d94cdb265a2175680135d9d53d2fe561cf3e4d9104ac8dfd_amd64
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:f59053ff609ad0f909f45c9f35a87b319e2150591bbcddf4b64e2e78e98d3d67_amd64 as a component of Red Hat OpenShift Container Platform 4.11*
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:b24d1feb6e7d5afcfb643ea8cee51f1af094c2dcf9c692f141178858c7a2a757_s390x as a component of Red Hat OpenShift Container Platform 4.11openshift4/ose-csi-node-driver-registrar@sha256:b24d1feb6e7d5afcfb643ea8cee51f1af094c2dcf9c692f141178858c7a2a757_s390x

…and 1210 more

Timeline

  • Sep 7, 2022 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 30, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›