VDB
RHSA-2022%3A6347
RHSA-2022%3A6347
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/volsync-rhel8@sha256:2d1b6bbc13629367ed2cbd0a551e9aa8732f330673d70c0bc8c3ce16049a4ae5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-rhel8@sha256:2d1b6bbc13629367ed2cbd0a551e9aa8732f330673d70c0bc8c3ce16049a4ae5_ppc64le, rhacm2/volsync-rhel8@sha256:2d1b6bbc13629367ed2cbd0a551e9aa8732f330673d70c0bc8c3ce16049a4ae5_ppc64le, * |
| Red Hat | rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64, rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64, rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64 |
| Red Hat | rhacm2/volsync-mover-restic-rhel8@sha256:d1e0fb45b4337dbe141e22b1ad1c3aaf21acad1349644b4f51df35c76ea77997_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-restic-rhel8@sha256:d1e0fb45b4337dbe141e22b1ad1c3aaf21acad1349644b4f51df35c76ea77997_arm64, rhacm2/volsync-mover-restic-rhel8@sha256:d1e0fb45b4337dbe141e22b1ad1c3aaf21acad1349644b4f51df35c76ea77997_arm64, rhacm2/volsync-mover-restic-rhel8@sha256:d1e0fb45b4337dbe141e22b1ad1c3aaf21acad1349644b4f51df35c76ea77997_arm64 |
| Red Hat | rhacm2/volsync-mover-syncthing-rhel8@sha256:5c6b0466ac9be0293edd8d55f43fe3b9ae5e833a223af33c29b7338c8a47d656_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-syncthing-rhel8@sha256:5c6b0466ac9be0293edd8d55f43fe3b9ae5e833a223af33c29b7338c8a47d656_amd64, rhacm2/volsync-mover-syncthing-rhel8@sha256:5c6b0466ac9be0293edd8d55f43fe3b9ae5e833a223af33c29b7338c8a47d656_amd64, * |
| Red Hat | rhacm2/volsync-mover-restic-rhel8@sha256:d1e0fb45b4337dbe141e22b1ad1c3aaf21acad1349644b4f51df35c76ea77997_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/volsync-mover-rclone-rhel8@sha256:38e0d652b99dfa8e1fbf2160c931c91fcafe2115025d21cad8349bf3b32a52e8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-rclone-rhel8@sha256:38e0d652b99dfa8e1fbf2160c931c91fcafe2115025d21cad8349bf3b32a52e8_amd64, *, * |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64, rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64, rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64 |
| Red Hat | rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, rhacm2/volsync-mover-restic-rhel8@sha256:6d7f6d469d82cbb09a13b508917b555b40075a191e58d5c6ab78b39f98b2d723_amd64 |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:6c02663d7d04e79c26c8d2b8d6ba6d71c19b85062cb7d1c39c9b2277cc503322_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, rhacm2/volsync-mover-rsync-rhel8@sha256:6c02663d7d04e79c26c8d2b8d6ba6d71c19b85062cb7d1c39c9b2277cc503322_s390x |
| Red Hat | rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64, rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64 |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le, rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le, * |
| Red Hat | rhacm2/volsync-rhel8@sha256:d6780a0a1cf868d6f65f19daf6e9e6ed9ee08b48694fd5f3827ba70714ca7440_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-rhel8@sha256:d6780a0a1cf868d6f65f19daf6e9e6ed9ee08b48694fd5f3827ba70714ca7440_s390x, *, rhacm2/volsync-rhel8@sha256:d6780a0a1cf868d6f65f19daf6e9e6ed9ee08b48694fd5f3827ba70714ca7440_s390x |
| Red Hat | rhacm2/volsync-mover-syncthing-rhel8@sha256:e4485e9a91a9ab3494ca1fdb0779e8a03a88b846bf4df3b5f34c5fa7b2714bf4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-syncthing-rhel8@sha256:e4485e9a91a9ab3494ca1fdb0779e8a03a88b846bf4df3b5f34c5fa7b2714bf4_s390x, rhacm2/volsync-mover-syncthing-rhel8@sha256:e4485e9a91a9ab3494ca1fdb0779e8a03a88b846bf4df3b5f34c5fa7b2714bf4_s390x, * |
| Red Hat | rhacm2/volsync-rhel8@sha256:01a39318c761d435e1cc91837fb017014f5bd7f3fa43f3859fe0b8071e56a385_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-rhel8@sha256:01a39318c761d435e1cc91837fb017014f5bd7f3fa43f3859fe0b8071e56a385_amd64, rhacm2/volsync-rhel8@sha256:01a39318c761d435e1cc91837fb017014f5bd7f3fa43f3859fe0b8071e56a385_amd64, rhacm2/volsync-rhel8@sha256:01a39318c761d435e1cc91837fb017014f5bd7f3fa43f3859fe0b8071e56a385_amd64 |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:cfb59342191cc8986ad308670a34f74aceae39329e085d27917aa5ff8d2631a7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/volsync-rhel8@sha256:2d1b6bbc13629367ed2cbd0a551e9aa8732f330673d70c0bc8c3ce16049a4ae5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-rhel8@sha256:2d1b6bbc13629367ed2cbd0a551e9aa8732f330673d70c0bc8c3ce16049a4ae5_ppc64le, *, * |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-rsync-rhel8@sha256:6e4e7c4eb153e91c735917dcd6f06f4453c9962a7697ffa40cad941f8b870b45_arm64, *, * |
| Red Hat | rhacm2/volsync-operator-bundle@sha256:39f804bbf41c5165b84e06cc15f753a85fe11bf37706f0147a4345a9e8d0488f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-operator-bundle@sha256:39f804bbf41c5165b84e06cc15f753a85fe11bf37706f0147a4345a9e8d0488f_amd64, rhacm2/volsync-operator-bundle@sha256:39f804bbf41c5165b84e06cc15f753a85fe11bf37706f0147a4345a9e8d0488f_amd64, * |
| Red Hat | rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64, rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64, rhacm2/volsync-rhel8@sha256:a90ddd406a30d9a95cfd27f002d133dfc6042309815a9d850cdd36cc788e932d_arm64 |
| Red Hat | rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le, rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le, rhacm2/volsync-mover-rsync-rhel8@sha256:1b4996edfec9ad6bc81d4637797429866454b49d0e19a4181bcd76deed6db5c6_ppc64le |
…and 24 more
Timeline
- Sep 6, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:6347 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2064702 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2092793 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107371 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107374 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107376 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107383 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107388 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107392 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6347.json advisory
- https://access.redhat.com/security/cve/CVE-2022-1705 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1705 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-1705 advisory
- https://go.dev/issue/53188 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory
- https://access.redhat.com/security/cve/CVE-2022-1962 advisory
…and 39 more