VDB
RHSA-2022%3A6537
RHSA-2022%3A6537
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-helm-operator@sha256:aa626ed7b1d068f20493e9a720ed05d694b5bdda18fe740f02a7c4300fea1a45_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-helm-operator@sha256:aa626ed7b1d068f20493e9a720ed05d694b5bdda18fe740f02a7c4300fea1a45_ppc64le, openshift4/ose-helm-operator@sha256:aa626ed7b1d068f20493e9a720ed05d694b5bdda18fe740f02a7c4300fea1a45_ppc64le |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:32c3ffa9139d340d5f9ff2722429409f9e085b6f3ada7435fad479db89a808f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-local-storage-mustgather-rhel8@sha256:32c3ffa9139d340d5f9ff2722429409f9e085b6f3ada7435fad479db89a808f0_ppc64le, * |
| Red Hat | openshift4/ose-sriov-network-config-daemon@sha256:354165781b3a450655c3227492777b878bce55e96ee835756fd22dab663704a6_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-network-config-daemon@sha256:354165781b3a450655c3227492777b878bce55e96ee835756fd22dab663704a6_amd64, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:2af064862bdf4a2d7fcdfb0c8558af532d0d6b87922d20df794ad56006b413ca_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-sriov-infiniband-cni@sha256:2af064862bdf4a2d7fcdfb0c8558af532d0d6b87922d20df794ad56006b413ca_amd64, openshift4/ose-sriov-infiniband-cni@sha256:2af064862bdf4a2d7fcdfb0c8558af532d0d6b87922d20df794ad56006b413ca_amd64 |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:7c2ece287e1492e976650276d108b487cf16a36dbced8561c06df7910cca9127_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-cluster-nfd-operator@sha256:7c2ece287e1492e976650276d108b487cf16a36dbced8561c06df7910cca9127_arm64 |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:d2ee2910b740ac69a5aa7766abe1fea1321fd8eeab3f545340f74a764f434761_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-cluster-nfd-operator@sha256:d2ee2910b740ac69a5aa7766abe1fea1321fd8eeab3f545340f74a764f434761_ppc64le |
| Red Hat | openshift4/special-resource-rhel8-operator@sha256:09082199496d5016c624fac99013f0c9232cf7595f5a5ae10897b35333198036_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/special-resource-rhel8-operator@sha256:09082199496d5016c624fac99013f0c9232cf7595f5a5ae10897b35333198036_arm64, * |
| Red Hat | openshift4/ose-sriov-network-webhook@sha256:f2ba92052bee80da2ef0531b1a1c226c7b032679cf7bf11f95263630839ec7cb_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-egress-http-proxy@sha256:75df0794286caeb35ba8e5f16446561e55eef68699554786c12ae42f2c40d42c_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-egress-http-proxy@sha256:75df0794286caeb35ba8e5f16446561e55eef68699554786c12ae42f2c40d42c_arm64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:fb2977bc8428e8e4e0ef8766e7665e67f06ff1ee62a80e1385410d41cfe2ce07_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:fb2977bc8428e8e4e0ef8766e7665e67f06ff1ee62a80e1385410d41cfe2ce07_amd64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:a6ca7f811c412e8048db095220c196ce5d1882187af2837b659df5fd54e01584_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:b3668194940e3167210a30b84d890c579ce560c7ce20de0d532ba5b4c1f79c5b_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-operator-sdk-rhel8@sha256:b3668194940e3167210a30b84d890c579ce560c7ce20de0d532ba5b4c1f79c5b_amd64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:65787621a3e5d031a9fc689f43d02dfc5691288fdd492f4ed1aff6442e490b06_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-local-storage-diskmaker@sha256:65787621a3e5d031a9fc689f43d02dfc5691288fdd492f4ed1aff6442e490b06_arm64 |
| Red Hat | openshift4/ose-sriov-network-config-daemon@sha256:31064384339478ddeb7ef558896e5512843937675ff503450e8fd5564b821d63_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-sriov-network-config-daemon@sha256:31064384339478ddeb7ef558896e5512843937675ff503450e8fd5564b821d63_ppc64le |
| Red Hat | openshift4/ose-helm-operator@sha256:aa626ed7b1d068f20493e9a720ed05d694b5bdda18fe740f02a7c4300fea1a45_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-helm-operator@sha256:aa626ed7b1d068f20493e9a720ed05d694b5bdda18fe740f02a7c4300fea1a45_ppc64le |
| Red Hat | openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:f20a7e320a8cc1483e37b04bb9a0853719aaf08a8339c9cbb81be601e8f563b4_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:f20a7e320a8cc1483e37b04bb9a0853719aaf08a8339c9cbb81be601e8f563b4_amd64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:39f8eada1652b0294a7140437d27a275507c64a0c904d6d17ab7f9189bb78086_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:c4271ce60d4f72ad1e34f902b6ffcd6cc4d749c462e0fd149472f7a969d2f151_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/metallb-rhel8@sha256:d81c9df0d8f4e37e7f6f38c674e24e3b8e3eee702cbebf9b5347b125d8fb4a67_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/metallb-rhel8@sha256:d81c9df0d8f4e37e7f6f38c674e24e3b8e3eee702cbebf9b5347b125d8fb4a67_ppc64le, openshift4/metallb-rhel8@sha256:d81c9df0d8f4e37e7f6f38c674e24e3b8e3eee702cbebf9b5347b125d8fb4a67_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:22f4f93db2839f56d5400bd6ea03cd19f434dcd4911ed99cf6637d3745c90a70_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
…and 318 more
Timeline
- Sep 20, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6537 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2100495 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6537.json advisory
- https://access.redhat.com/security/cve/CVE-2021-38561 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-38561 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-38561 advisory
- https://pkg.go.dev/vuln/GO-2021-0113 advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory