VDB
RHSA-2022%3A6348
RHSA-2022%3A6348
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, *, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, * |
| Red Hat | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64, rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64, rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, * |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64, rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 |
| Red Hat | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64, rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| golang | go | |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le, rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le, rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
Timeline
- Sep 6, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:6348 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2092793 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107371 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107374 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107376 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107383 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107388 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107392 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6348.json advisory
- https://access.redhat.com/security/cve/CVE-2022-1705 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1705 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-1705 advisory
- https://go.dev/issue/53188 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory
- https://access.redhat.com/security/cve/CVE-2022-1962 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1962 advisory
…and 34 more