VDB
RHSA-2022%3A6882
RHSA-2022%3A6882
PUBLISHED
CVSS 7.5 HIGH
A vulnerability was found in the golang.org/x/text/language package. An attacker can craft an Accept-Language header which ParseAcceptLanguage will take significant time to parse. This issue leads to a denial of service, and can impact availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:b78456120cab1aac6044a6953e4dfd899f3c7d6b58a0e5cd8f166e4bffb5d941_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/cluster-logging-operator-bundle@sha256:b78456120cab1aac6044a6953e4dfd899f3c7d6b58a0e5cd8f166e4bffb5d941_amd64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:85dbeff544f48c08d0351eca88b10b7b07cea181382472a8d6b766d4facbbb5f_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/fluentd-rhel8@sha256:85dbeff544f48c08d0351eca88b10b7b07cea181382472a8d6b766d4facbbb5f_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:6a0c8026b1fbc39d1a012f963eed016f3df99745235a256898cc3f92b5c913f3_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:6a0c8026b1fbc39d1a012f963eed016f3df99745235a256898cc3f92b5c913f3_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:8fde863a056af0d59dfa63ffa9f65af94ce5a6d2713ee84d35ea19dc5357f583_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/logging-curator5-rhel8@sha256:8fde863a056af0d59dfa63ffa9f65af94ce5a6d2713ee84d35ea19dc5357f583_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:2eb93d134ac01322408a31538fa14f3d29b77568ad20f71e2bc2303eca957c05_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:2eb93d134ac01322408a31538fa14f3d29b77568ad20f71e2bc2303eca957c05_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:e785074e66edd55f68d4971cb42bcc9612c9b2713593555162d82b9218368023_s390x as a component of OpenShift Logging 5.3 | openshift-logging/cluster-logging-rhel8-operator@sha256:e785074e66edd55f68d4971cb42bcc9612c9b2713593555162d82b9218368023_s390x |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:a57abda6ba1cde99d47f6ea7a63e17a258f1f9ea73ca8bceadad7541477e7b81_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-rhel8-operator@sha256:a57abda6ba1cde99d47f6ea7a63e17a258f1f9ea73ca8bceadad7541477e7b81_amd64 |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:819e2985a882f2ddb34a137b0886d13ed764dac5b976fc4b450ba23cbc09597a_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-rhel8-operator@sha256:819e2985a882f2ddb34a137b0886d13ed764dac5b976fc4b450ba23cbc09597a_ppc64le |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:3c36dfe54c3597a2c0ba0fcf6fbd991e479847f9b7f8957fb60eb7039e1e662e_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/log-file-metric-exporter-rhel8@sha256:3c36dfe54c3597a2c0ba0fcf6fbd991e479847f9b7f8957fb60eb7039e1e662e_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:f7fa0d3ea11001123fa1f59b2ae1edb230fb96157b19ec230d876793b4ed1554_s390x as a component of OpenShift Logging 5.3 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:cea0810e580ab422b8f54ae0f095f1ef4346cfef81873b5999a66cdc2687165a_s390x as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch-proxy-rhel8@sha256:cea0810e580ab422b8f54ae0f095f1ef4346cfef81873b5999a66cdc2687165a_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:b712b4568533eccc3e67894c69a27f024a710c0a0759cb04a799077bc21ad7b0_s390x as a component of OpenShift Logging 5.3 | openshift-logging/fluentd-rhel8@sha256:b712b4568533eccc3e67894c69a27f024a710c0a0759cb04a799077bc21ad7b0_s390x |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:85dbeff544f48c08d0351eca88b10b7b07cea181382472a8d6b766d4facbbb5f_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/fluentd-rhel8@sha256:85dbeff544f48c08d0351eca88b10b7b07cea181382472a8d6b766d4facbbb5f_ppc64le |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:45a595d11960d01f153dfe7ff6f8336aa1ccf09c044d7e26763ae348c8dc1181_amd64 as a component of OpenShift Logging 5.3 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:d05f697c6da62036fcbba633a4cb6d253fdd6882c9205ad9a7cb9710878402a0_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/cluster-logging-rhel8-operator@sha256:d05f697c6da62036fcbba633a4cb6d253fdd6882c9205ad9a7cb9710878402a0_amd64 |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:e8297522f54b2649a08e10dd5a2ff7d01e6012e87cc82de876be7a2ace292011_amd64 as a component of OpenShift Logging 5.3 | openshift-logging/logging-curator5-rhel8@sha256:e8297522f54b2649a08e10dd5a2ff7d01e6012e87cc82de876be7a2ace292011_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:1cd6bbc32620099b0e2b6a31ec0d0a82a3d4819f3d3c4ce5312b24277e89e4bf_ppc64le as a component of OpenShift Logging 5.3 | openshift-logging/elasticsearch6-rhel8@sha256:1cd6bbc32620099b0e2b6a31ec0d0a82a3d4819f3d3c4ce5312b24277e89e4bf_ppc64le |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:c5218abf99c5401fbcec34c93f99805e109d889b27c28719f0ce75a952015f17_amd64 as a component of OpenShift Logging 5.3 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:b712b4568533eccc3e67894c69a27f024a710c0a0759cb04a799077bc21ad7b0_s390x as a component of OpenShift Logging 5.3 | openshift-logging/fluentd-rhel8@sha256:b712b4568533eccc3e67894c69a27f024a710c0a0759cb04a799077bc21ad7b0_s390x |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:8b3b9895d498036e7fb7451f52757ce8f3832d711254ed6649e97fe06d16195a_amd64 as a component of OpenShift Logging 5.3 | * |
…and 32 more
Timeline
- Nov 9, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6882 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2134010 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6882.json advisory
- https://access.redhat.com/security/cve/CVE-2022-32149 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-32149 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-32149 advisory
- https://go.dev/issue/56152 advisory
- https://groups.google.com/g/golang-dev/c/qfPIly0X7aU advisory