VDB
RHSA-2022%3A6430
RHSA-2022%3A6430
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64, oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64, oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64 |
| Red Hat | oadp/oadp-registry-rhel8@sha256:10ab07c1494e47c1da64e61e5a5e5889e5e74429a10da95a9f908f5bf0c0553a_amd64 as a component of 8Base-OADP-1.0 | *, *, oadp/oadp-registry-rhel8@sha256:10ab07c1494e47c1da64e61e5a5e5889e5e74429a10da95a9f908f5bf0c0553a_amd64 |
| Red Hat | oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64, oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64 |
| Red Hat | oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64, *, * |
| Red Hat | oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64, *, oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64 |
| Red Hat | oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:dfcf22434189301007fb440c6b714a04163c931cbc3021f337b19ccf840bde70_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:dfcf22434189301007fb440c6b714a04163c931cbc3021f337b19ccf840bde70_amd64, oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:dfcf22434189301007fb440c6b714a04163c931cbc3021f337b19ccf840bde70_amd64, oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:dfcf22434189301007fb440c6b714a04163c931cbc3021f337b19ccf840bde70_amd64 |
| Red Hat | oadp/oadp-rhel8-operator@sha256:8769890ce3bd07afb147fd045bdfd4dd02f7d2a83857728d60fe576c455f8a56_amd64 as a component of 8Base-OADP-1.0 | *, *, oadp/oadp-rhel8-operator@sha256:8769890ce3bd07afb147fd045bdfd4dd02f7d2a83857728d60fe576c455f8a56_amd64 |
| Red Hat | oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64, * |
| Red Hat | oadp/oadp-velero-plugin-rhel8 | |
| Red Hat | oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64, oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64, oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64 |
| Red Hat | oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64, oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64, oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64 |
| Red Hat | oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64, oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64 |
| Red Hat | oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64, *, oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64 |
| Red Hat | oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64, * |
| Red Hat | oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64, oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64 |
| Red Hat | oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64, *, * |
| Red Hat | oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64, * |
| Red Hat | oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64 as a component of 8Base-OADP-1.0 | oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64, oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64, oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64 |
| Red Hat | oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64, oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64 |
| Red Hat | oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64 as a component of 8Base-OADP-1.0 | *, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64 |
…and 6 more
Timeline
- Sep 13, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:6430 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2077688 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2092793 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107371 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107374 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107376 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107383 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6430.json advisory
- https://access.redhat.com/security/cve/CVE-2022-1705 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1705 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-1705 advisory
- https://go.dev/issue/53188 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory
- https://access.redhat.com/security/cve/CVE-2022-1962 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1962 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-1962 advisory
- https://go.dev/issue/53616 advisory
…and 24 more