RHSA-2022%3A8535 — Vulnetix

RHSA-2022%3A8535 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panic.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

…and 1197 more

Timeline

Nov 24, 2022 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 11, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2022:8535 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2075126 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2102241 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2113814 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2124669 issue
https://issues.redhat.com/browse/OCPBUGS-1790 advisory
https://issues.redhat.com/browse/OCPBUGS-1847 advisory
https://issues.redhat.com/browse/OCPBUGS-2925 advisory
https://issues.redhat.com/browse/OCPBUGS-2983 advisory
https://issues.redhat.com/browse/OCPBUGS-3190 advisory
https://issues.redhat.com/browse/OCPBUGS-3197 advisory
https://issues.redhat.com/browse/OCPBUGS-3260 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8535.json advisory
https://access.redhat.com/security/cve/CVE-2022-2879 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2132867 issue
https://www.cve.org/CVERecord?id=CVE-2022-2879 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2879 advisory
https://github.com/golang/go/issues/54853 advisory
https://github.com/vbatts/tar-split/releases/tag/v0.12.1 advisory

…and 21 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:5bf97fcfda34e53b1f937c600ab4c0d719ad6a1846a52459f9962d71f1061b1b_s390x as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:5bf97fcfda34e53b1f937c600ab4c0d719ad6a1846a52459f9962d71f1061b1b_s390x, ,
Red Hat	openshift4/ose-docker-builder@sha256:ccbef6457d8f268fb642485d11a46d4a9ed1ecf76f71bfa9d746f8b59050269e_s390x as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-docker-builder@sha256:ccbef6457d8f268fb642485d11a46d4a9ed1ecf76f71bfa9d746f8b59050269e_s390x, openshift4/ose-docker-builder@sha256:ccbef6457d8f268fb642485d11a46d4a9ed1ecf76f71bfa9d746f8b59050269e_s390x
Red Hat	openshift4/ose-cloud-credential-operator@sha256:103b68efd508e985dc808b64330ad65f8e4d2d3de810cb71e93fe264749841a0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cloud-credential-operator@sha256:103b68efd508e985dc808b64330ad65f8e4d2d3de810cb71e93fe264749841a0_ppc64le, openshift4/ose-cloud-credential-operator@sha256:103b68efd508e985dc808b64330ad65f8e4d2d3de810cb71e93fe264749841a0_ppc64le, *
Red Hat	openshift4/ose-cluster-baremetal-operator-rhel8@sha256:182dc69d41fef4faafe712fc77327003ee973a5d2689612db9c59ea91d09da4e_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-baremetal-operator-rhel8@sha256:182dc69d41fef4faafe712fc77327003ee973a5d2689612db9c59ea91d09da4e_ppc64le
Red Hat	openshift4/ose-csi-driver-manila-rhel8@sha256:8af01a9b165e96cb24a345ec15e00c4b921a7558a2fd9eaa0acdca54b378a716_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-csi-driver-manila-rhel8@sha256:8af01a9b165e96cb24a345ec15e00c4b921a7558a2fd9eaa0acdca54b378a716_amd64, openshift4/ose-csi-driver-manila-rhel8@sha256:8af01a9b165e96cb24a345ec15e00c4b921a7558a2fd9eaa0acdca54b378a716_amd64, *
Red Hat	openshift4/ose-operator-marketplace@sha256:8060ad5eb203054e71214b412c5b3a2c9a278aa47080d48f93c7921b988192e1_amd64 as a component of Red Hat OpenShift Container Platform 4.11	, openshift4/ose-operator-marketplace@sha256:8060ad5eb203054e71214b412c5b3a2c9a278aa47080d48f93c7921b988192e1_amd64,
Red Hat	openshift4/ose-cluster-authentication-operator@sha256:ae2fc3ea6be9166aa3bf62d714a8c2245e6cddeba3935a473d51ababa09df060_s390x as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-authentication-operator@sha256:ae2fc3ea6be9166aa3bf62d714a8c2245e6cddeba3935a473d51ababa09df060_s390x, openshift4/ose-cluster-authentication-operator@sha256:ae2fc3ea6be9166aa3bf62d714a8c2245e6cddeba3935a473d51ababa09df060_s390x, openshift4/ose-cluster-authentication-operator@sha256:ae2fc3ea6be9166aa3bf62d714a8c2245e6cddeba3935a473d51ababa09df060_s390x
Red Hat	openshift4/ose-tools-rhel8@sha256:fc054183aac267755bd9b62f5f4558222d87e04fd234b4401ccb8c9723a2b5ed_amd64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-tools-rhel8@sha256:fc054183aac267755bd9b62f5f4558222d87e04fd234b4401ccb8c9723a2b5ed_amd64, ,
Red Hat	openshift4/ose-prometheus@sha256:2f6dc081b0b94a4a9c24560dd1e1ad5fc3722e43d5e665c6639453ad4e044581_s390x as a component of Red Hat OpenShift Container Platform 4.11	, , openshift4/ose-prometheus@sha256:2f6dc081b0b94a4a9c24560dd1e1ad5fc3722e43d5e665c6639453ad4e044581_s390x
Red Hat	openshift4/ose-cluster-etcd-rhel8-operator@sha256:bf4a9d10682205d4b7d41d3833d95ebd20ccb7f1127d3a49ec1e5455a38413e6_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-etcd-rhel8-operator@sha256:bf4a9d10682205d4b7d41d3833d95ebd20ccb7f1127d3a49ec1e5455a38413e6_ppc64le, ,
Red Hat	openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:35b11e9242698ca1fab04e450e57537f9ba465a71c71656fb88675895a97f7ea_amd64 as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:35b11e9242698ca1fab04e450e57537f9ba465a71c71656fb88675895a97f7ea_amd64, openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:35b11e9242698ca1fab04e450e57537f9ba465a71c71656fb88675895a97f7ea_amd64
Red Hat	openshift4/ose-prometheus-node-exporter@sha256:13b7dff7df2bdc8449e4b6723ab3cb56c1fbf8cdbf40835940e73280a013eb59_arm64 as a component of Red Hat OpenShift Container Platform 4.11	*
Red Hat	openshift4/ose-cluster-policy-controller-rhel8@sha256:c7dd309c081e7995db30cb7026c19023447663b09219faf6b90d2dae25316aa3_arm64 as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-cluster-policy-controller-rhel8@sha256:c7dd309c081e7995db30cb7026c19023447663b09219faf6b90d2dae25316aa3_arm64, openshift4/ose-cluster-policy-controller-rhel8@sha256:c7dd309c081e7995db30cb7026c19023447663b09219faf6b90d2dae25316aa3_arm64
Red Hat	openshift4/ose-ovn-kubernetes@sha256:cff24558aab57737dc99c6d27cebf355dc6398e01485209e59d7bb31a14a6fbc_ppc64le as a component of Red Hat OpenShift Container Platform 4.11	*
Red Hat	openshift4/ose-must-gather@sha256:1b594ed06780605737b185e53122df03d706b05d6ab13ed221fc5bebbb4e9adb_s390x as a component of Red Hat OpenShift Container Platform 4.11	, , openshift4/ose-must-gather@sha256:1b594ed06780605737b185e53122df03d706b05d6ab13ed221fc5bebbb4e9adb_s390x
Red Hat	openshift4/ose-cluster-image-registry-operator@sha256:fc0d9985107fcc27ccbdfe41839035773f6dd46cda8f0024f782160a07a31f2d_s390x as a component of Red Hat OpenShift Container Platform 4.11	*, openshift4/ose-cluster-image-registry-operator@sha256:fc0d9985107fcc27ccbdfe41839035773f6dd46cda8f0024f782160a07a31f2d_s390x, openshift4/ose-cluster-image-registry-operator@sha256:fc0d9985107fcc27ccbdfe41839035773f6dd46cda8f0024f782160a07a31f2d_s390x
Red Hat	openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:997819ead19190e9d03528ee19a9aa96f782b9801beb57f7a3404c811df07101_arm64 as a component of Red Hat OpenShift Container Platform 4.11	, , openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:997819ead19190e9d03528ee19a9aa96f782b9801beb57f7a3404c811df07101_arm64
Red Hat	openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:1b71faff2379a791135b841d10602fc241d7b9079207a9a8a637556c305980b5_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:1b71faff2379a791135b841d10602fc241d7b9079207a9a8a637556c305980b5_arm64, ,
Red Hat	openshift4/ose-cluster-machine-approver@sha256:6c23e20690b6d615428bbe83d47a77a4cec41a163152984e700363ee71dc0b61_arm64 as a component of Red Hat OpenShift Container Platform 4.11	openshift4/ose-cluster-machine-approver@sha256:6c23e20690b6d615428bbe83d47a77a4cec41a163152984e700363ee71dc0b61_arm64, *, openshift4/ose-cluster-machine-approver@sha256:6c23e20690b6d615428bbe83d47a77a4cec41a163152984e700363ee71dc0b61_arm64
Red Hat	openshift4/ose-cluster-etcd-rhel8-operator@sha256:11ff2b8b6ac4a89e0ecf5acb3f992af1d3334c607fb689bc9011816ee652bd9c_s390x as a component of Red Hat OpenShift Container Platform 4.11	, openshift4/ose-cluster-etcd-rhel8-operator@sha256:11ff2b8b6ac4a89e0ecf5acb3f992af1d3334c607fb689bc9011816ee652bd9c_s390x,