VDB
RHSA-2022%3A6560
RHSA-2022%3A6560
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/fluentd-rhel8@sha256:37f3395b822b0abf2b429c6e8ee8630b3277e94839dc0be2244ed5bcde1920f4_s390x as a component of OpenShift Logging 5.3 | openshift-logging/fluentd-rhel8@sha256:37f3395b822b0abf2b429c6e8ee8630b3277e94839dc0be2244ed5bcde1920f4_s390x, *, openshift-logging/fluentd-rhel8@sha256:37f3395b822b0abf2b429c6e8ee8630b3277e94839dc0be2244ed5bcde1920f4_s390x |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64 as a component of OpenShift Logging 5.3 | *, *, openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:8624ee91b9351a1bb66a4dfc1e1b25730c1f52dd42152b0852d78674dcf6dca2_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/cluster-logging-rhel8-operator@sha256:8624ee91b9351a1bb66a4dfc1e1b25730c1f52dd42152b0852d78674dcf6dca2_amd64, *, openshift-logging/cluster-logging-rhel8-operator@sha256:8624ee91b9351a1bb66a4dfc1e1b25730c1f52dd42152b0852d78674dcf6dca2_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:8624ee91b9351a1bb66a4dfc1e1b25730c1f52dd42152b0852d78674dcf6dca2_amd64 as a component of OpenShift Logging 5.3 | *, *, * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:dd0ec978c68dee9bf5de1b59107cd80d56f97d16888b092a58655844621adcdf_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:dd0ec978c68dee9bf5de1b59107cd80d56f97d16888b092a58655844621adcdf_amd64, openshift-logging/elasticsearch-proxy-rhel8@sha256:dd0ec978c68dee9bf5de1b59107cd80d56f97d16888b092a58655844621adcdf_amd64, openshift-logging/elasticsearch-proxy-rhel8@sha256:dd0ec978c68dee9bf5de1b59107cd80d56f97d16888b092a58655844621adcdf_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x as a component of OpenShift Logging 5.3 | openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x, openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x, * |
| golang | Go | |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le, * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:276194dd7ea4bf90ec8f61d1af07e9027bec9be664e3924c94eedbe06df94dd8_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-rhel8-operator@sha256:276194dd7ea4bf90ec8f61d1af07e9027bec9be664e3924c94eedbe06df94dd8_amd64, openshift-logging/elasticsearch-rhel8-operator@sha256:276194dd7ea4bf90ec8f61d1af07e9027bec9be664e3924c94eedbe06df94dd8_amd64, openshift-logging/elasticsearch-rhel8-operator@sha256:276194dd7ea4bf90ec8f61d1af07e9027bec9be664e3924c94eedbe06df94dd8_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x as a component of OpenShift Logging 5.3 | *, *, openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:381e04249bcf4845b2cc420eed59f0018a7a6023b57cc34a8cfca4ad24fe0656_ppc64le as a component of OpenShift Logging 5.3 | *, openshift-logging/logging-curator5-rhel8@sha256:381e04249bcf4845b2cc420eed59f0018a7a6023b57cc34a8cfca4ad24fe0656_ppc64le, openshift-logging/logging-curator5-rhel8@sha256:381e04249bcf4845b2cc420eed59f0018a7a6023b57cc34a8cfca4ad24fe0656_ppc64le |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:8ebfe4dba1b62a34a640a463174f57e2ff5b9ee4f1a458e3953a2ec60810ac1a_s390x as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch6-rhel8@sha256:8ebfe4dba1b62a34a640a463174f57e2ff5b9ee4f1a458e3953a2ec60810ac1a_s390x, *, * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:e0da6bf1ac54febfb77ca9f1c19337551b1a7c6c55ec440b85be2c2e28ba5e4e_ppc64le as a component of OpenShift Logging 5.3 | *, *, openshift-logging/cluster-logging-rhel8-operator@sha256:e0da6bf1ac54febfb77ca9f1c19337551b1a7c6c55ec440b85be2c2e28ba5e4e_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:f80dadc60a394ebe2f6ae12077d7cd7d515f66ad6684a669651bba394cc8dea8_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:f80dadc60a394ebe2f6ae12077d7cd7d515f66ad6684a669651bba394cc8dea8_ppc64le, openshift-logging/elasticsearch-proxy-rhel8@sha256:f80dadc60a394ebe2f6ae12077d7cd7d515f66ad6684a669651bba394cc8dea8_ppc64le, * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:c7ccaa9e38ad0ba6858cf9bd1ec95a120c2e21750767992a41d34ae37b54490b_s390x as a component of OpenShift Logging 5.3 | *, *, * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64 as a component of OpenShift Logging 5.3 | *, openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64, openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:96d5c193e216cdb6a6eb762f419132c94c6d68034fc3d1c194df1b2a13f2aedb_s390x as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:96d5c193e216cdb6a6eb762f419132c94c6d68034fc3d1c194df1b2a13f2aedb_s390x, openshift-logging/elasticsearch-proxy-rhel8@sha256:96d5c193e216cdb6a6eb762f419132c94c6d68034fc3d1c194df1b2a13f2aedb_s390x, openshift-logging/elasticsearch-proxy-rhel8@sha256:96d5c193e216cdb6a6eb762f419132c94c6d68034fc3d1c194df1b2a13f2aedb_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:37f3395b822b0abf2b429c6e8ee8630b3277e94839dc0be2244ed5bcde1920f4_s390x as a component of OpenShift Logging 5.3 | *, *, * |
…and 35 more
Timeline
- Sep 26, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jun 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6560 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6560.json advisory
- https://access.redhat.com/security/cve/CVE-2022-30631 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30631 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-30631 advisory
- https://go.dev/issue/53168 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory