VDB
RHSA-2022%3A7434
RHSA-2022%3A7434
PUBLISHED
CVSS 7.5 HIGH
A vulnerability was found in the golang.org/x/text/language package. An attacker can craft an Accept-Language header which ParseAcceptLanguage will take significant time to parse. This issue leads to a denial of service, and can impact availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:e3e5b570f9c819cb10ad38e928a301e8f0554e45052037b03f1ba81a3faa6a15_s390x as a component of RHOL 5.5 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:e3e5b570f9c819cb10ad38e928a301e8f0554e45052037b03f1ba81a3faa6a15_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:11c10388503a708a962e3dfc5cdd9b6ad5c5d4d4a68b11f97f8fae2cc3884083_s390x as a component of RHOL 5.5 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:11c10388503a708a962e3dfc5cdd9b6ad5c5d4d4a68b11f97f8fae2cc3884083_s390x |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:f0ca78341daa3d41ffe460f5aa504219c72ee673dd57a82f344d3239b69717be_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:f0ca78341daa3d41ffe460f5aa504219c72ee673dd57a82f344d3239b69717be_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:dc8fe0ca5a488c6738e6904871a620f9444f30475863a09846f8205569c25e54_amd64 as a component of RHOL 5.5 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:e1755002225548182e17bd82b1c129b2ac61e623c3c37c4d51a535012088cacc_amd64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:e1755002225548182e17bd82b1c129b2ac61e623c3c37c4d51a535012088cacc_amd64 |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:42ebf89821e0f8e4b7d03cc5a6d5a30d48f73a1ab2b7486c8a0bb1e5c2cfd4b4_ppc64le as a component of RHOL 5.5 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:42ebf89821e0f8e4b7d03cc5a6d5a30d48f73a1ab2b7486c8a0bb1e5c2cfd4b4_ppc64le |
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:a78fd59207ef6cc8ddaaa3f3ae7140b7678e96e0677517623d1537afc05e84dd_amd64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/cluster-logging-operator-bundle@sha256:a78fd59207ef6cc8ddaaa3f3ae7140b7678e96e0677517623d1537afc05e84dd_amd64 |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:da8c90c5b3b68e9b98a76828a450a9d7c579256b04aa9daf87ddfab9bad5548c_ppc64le as a component of RHOL 5.5 for RHEL 8 | * |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:dfa4ca06abb576fa071fb30c425bc6be631c0453939de562e1dc0b4e76de4f81_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:dfa4ca06abb576fa071fb30c425bc6be631c0453939de562e1dc0b4e76de4f81_arm64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:ca4f273fb088980bfcc3607bd7ea2d40cc93298262cb3f5ce4054a6235152d1e_arm64 as a component of RHOL 5.5 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:dce08ac53092fc51958b78df9b4b870926a079fe4cdc4fb2d46c8ba545a22e6a_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:dce08ac53092fc51958b78df9b4b870926a079fe4cdc4fb2d46c8ba545a22e6a_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:790fe2b90b51f8aff5d10b1525bcf7d35e5517674245993dac6696ebf2a24baf_ppc64le as a component of RHOL 5.5 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:790fe2b90b51f8aff5d10b1525bcf7d35e5517674245993dac6696ebf2a24baf_ppc64le |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:42ebf89821e0f8e4b7d03cc5a6d5a30d48f73a1ab2b7486c8a0bb1e5c2cfd4b4_ppc64le as a component of RHOL 5.5 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:42ebf89821e0f8e4b7d03cc5a6d5a30d48f73a1ab2b7486c8a0bb1e5c2cfd4b4_ppc64le |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:dd5e5a043befc54eeb63ff51a01691778053c90de5c9b8946d6a1d808fbcf0df_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:dd5e5a043befc54eeb63ff51a01691778053c90de5c9b8946d6a1d808fbcf0df_arm64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:b4eeab42904e5a81e7adb8801bd901a53a5b81b2464b33816c203daf7587f89f_ppc64le as a component of RHOL 5.5 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:b4eeab42904e5a81e7adb8801bd901a53a5b81b2464b33816c203daf7587f89f_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:5236634419119024d3f8779dbd78639a54c2323389f56fbf25dacdc499a072d3_s390x as a component of RHOL 5.5 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:147676e1a3c66757508be0046c28ccb7985f15af7f8f4a045fa5ca424c0c684d_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:147676e1a3c66757508be0046c28ccb7985f15af7f8f4a045fa5ca424c0c684d_arm64 |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:e5289e40532a01c605760b2f438acfb66257b730a89249269e46dc9c0058aec1_amd64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:e5289e40532a01c605760b2f438acfb66257b730a89249269e46dc9c0058aec1_amd64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:8b76243469011045e72b7a339288986e7561a3005aa94d580d5b1082580e9cec_ppc64le as a component of RHOL 5.5 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:8b76243469011045e72b7a339288986e7561a3005aa94d580d5b1082580e9cec_ppc64le |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:c8458b60077d018eaa78f38fc0b85786d8108b88faea6e420cc01b720f23af48_arm64 as a component of RHOL 5.5 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:c8458b60077d018eaa78f38fc0b85786d8108b88faea6e420cc01b720f23af48_arm64 |
…and 106 more
Timeline
- Nov 10, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:7434 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2134010 issue
- https://issues.redhat.com/browse/LOG-2674 advisory
- https://issues.redhat.com/browse/LOG-3042 advisory
- https://issues.redhat.com/browse/LOG-3049 advisory
- https://issues.redhat.com/browse/LOG-3127 advisory
- https://issues.redhat.com/browse/LOG-3138 advisory
- https://issues.redhat.com/browse/LOG-3175 advisory
- https://issues.redhat.com/browse/LOG-3213 advisory
- https://issues.redhat.com/browse/LOG-3234 advisory
- https://issues.redhat.com/browse/LOG-3251 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7434.json advisory
- https://access.redhat.com/security/cve/CVE-2022-32149 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-32149 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-32149 advisory
- https://go.dev/issue/56152 advisory
- https://groups.google.com/g/golang-dev/c/qfPIly0X7aU advisory