VDB

RHSA-2022%3A8938

RHSA-2022%3A8938 PUBLISHED CVSS 7.5 HIGH

There's an input validation flaw in golang.org/x/crypto's readCipherPacket() function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:3e26d023fe04a513982ff6c46b9fb6707c7302526de23e5314b2ad87b901a12a_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:3e26d023fe04a513982ff6c46b9fb6707c7302526de23e5314b2ad87b901a12a_ppc64le, *
Red Hatopenshift-serverless-1/serving-activator-rhel8@sha256:2e0dd72009677b0c822b8113e09aa62098828c3699a1ea333b7b01500fbb85a2_s390x as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/serving-activator-rhel8@sha256:2e0dd72009677b0c822b8113e09aa62098828c3699a1ea333b7b01500fbb85a2_s390x, openshift-serverless-1/serving-activator-rhel8@sha256:2e0dd72009677b0c822b8113e09aa62098828c3699a1ea333b7b01500fbb85a2_s390x
Red Hatopenshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:82c607d15562ec9bccb1a1f39444a534bebed6140f83a82bcfc04d5f7f6fbc04_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:82c607d15562ec9bccb1a1f39444a534bebed6140f83a82bcfc04d5f7f6fbc04_ppc64le
Red Hatopenshift-serverless-1/ingress-rhel8-operator@sha256:9d358c893b882914c58143f1a11629b87b542349bf489e6e96688ccb0ebec119_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/ingress-rhel8-operator@sha256:9d358c893b882914c58143f1a11629b87b542349bf489e6e96688ccb0ebec119_ppc64le, openshift-serverless-1/ingress-rhel8-operator@sha256:9d358c893b882914c58143f1a11629b87b542349bf489e6e96688ccb0ebec119_ppc64le
Red Hatopenshift-serverless-1/net-istio-controller-rhel8@sha256:a274fefaf2a5e9f1f23ce262e58fc1f2cb9dd0307c1f48927edc546df336b111_s390x as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/net-istio-controller-rhel8@sha256:a274fefaf2a5e9f1f23ce262e58fc1f2cb9dd0307c1f48927edc546df336b111_s390x
Red Hatopenshift-serverless-1/knative-rhel8-operator@sha256:7e2a5afad0290bed0e01ea688ca3569b9ef9527f3f6818b2228617af8056094b_s390x as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/knative-rhel8-operator@sha256:7e2a5afad0290bed0e01ea688ca3569b9ef9527f3f6818b2228617af8056094b_s390x, openshift-serverless-1/knative-rhel8-operator@sha256:7e2a5afad0290bed0e01ea688ca3569b9ef9527f3f6818b2228617af8056094b_s390x
Red Hatopenshift-serverless-1/serverless-rhel8-operator@sha256:241a30a9dfe58ef4f8335d023c42ba3c59f91954f26a95e5194b5185361c6e7a_amd64 as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/serverless-rhel8-operator@sha256:241a30a9dfe58ef4f8335d023c42ba3c59f91954f26a95e5194b5185361c6e7a_amd64
Red Hatopenshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:89df80b1beffb83a03a79f8a6900389c7058474769c8b12ff213365e9e7b67b9_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:89df80b1beffb83a03a79f8a6900389c7058474769c8b12ff213365e9e7b67b9_ppc64le, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:89df80b1beffb83a03a79f8a6900389c7058474769c8b12ff213365e9e7b67b9_ppc64le
Red Hatopenshift-serverless-1/eventing-mtping-rhel8@sha256:4fbe94de7327c201cceec04bcac87604c589c57c6d53cae857304d5d32fca1f9_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-mtping-rhel8@sha256:4fbe94de7327c201cceec04bcac87604c589c57c6d53cae857304d5d32fca1f9_ppc64le
Red Hatopenshift-serverless-1/ingress-rhel8-operator@sha256:884065686385aef8913269099227cc9b52e416fb5f6344e761f226b9290ed566_amd64 as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/ingress-rhel8-operator@sha256:884065686385aef8913269099227cc9b52e416fb5f6344e761f226b9290ed566_amd64
Red Hatopenshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c1904ddc938ae5f69b086508dcece129de814c89179dddcb9f52337024bbbb64_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c1904ddc938ae5f69b086508dcece129de814c89179dddcb9f52337024bbbb64_ppc64le
Red Hatopenshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:41ecdd9f3d30f6955f6fdd9f2bed5f2d5f734cb25e992d3184336421ccabd145_s390x as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:41ecdd9f3d30f6955f6fdd9f2bed5f2d5f734cb25e992d3184336421ccabd145_s390x, *
Red Hatopenshift-serverless-1/serverless-operator-bundle@sha256:0516545990ec466969730d43136016c10e7dc34f633bf2646463d12145d9f917_amd64 as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/serverless-operator-bundle@sha256:0516545990ec466969730d43136016c10e7dc34f633bf2646463d12145d9f917_amd64, *
Red Hatopenshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:1c3f6619ac4d6ce3a1af44e8d925409df65c9de0982535955e5546d670e9697a_amd64 as a component of Red Hat OpenShift Serverless 1.26*
Red Hatopenshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:a855da027f36288d8c3493d628d61c61ad140c0ee36f65266d81a91191c0b075_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:a855da027f36288d8c3493d628d61c61ad140c0ee36f65266d81a91191c0b075_ppc64le, openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:a855da027f36288d8c3493d628d61c61ad140c0ee36f65266d81a91191c0b075_ppc64le
Red Hatopenshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:f319a069e4bb626a4f0f4a0b810f8bfb06d02bc7e696dd9b24bbf30ab71d6cad_ppc64le as a component of Red Hat OpenShift Serverless 1.26*
Red Hatopenshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:fc69fe0285ac6809b493c0b9ca9f6bf2df45ebbcd0f4c5a2594977bb1b1d123e_ppc64le as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:fc69fe0285ac6809b493c0b9ca9f6bf2df45ebbcd0f4c5a2594977bb1b1d123e_ppc64le
Red Hatopenshift-serverless-1/net-istio-controller-rhel8@sha256:0d33d73301b0696f8c5d510ca9bec1402ae71f2bc2bfa2af7dc532a106d82829_amd64 as a component of Red Hat OpenShift Serverless 1.26openshift-serverless-1/net-istio-controller-rhel8@sha256:0d33d73301b0696f8c5d510ca9bec1402ae71f2bc2bfa2af7dc532a106d82829_amd64, openshift-serverless-1/net-istio-controller-rhel8@sha256:0d33d73301b0696f8c5d510ca9bec1402ae71f2bc2bfa2af7dc532a106d82829_amd64
Red Hatopenshift-serverless-1/eventing-mtping-rhel8@sha256:4fbe94de7327c201cceec04bcac87604c589c57c6d53cae857304d5d32fca1f9_ppc64le as a component of Red Hat OpenShift Serverless 1.26*, openshift-serverless-1/eventing-mtping-rhel8@sha256:4fbe94de7327c201cceec04bcac87604c589c57c6d53cae857304d5d32fca1f9_ppc64le
Red Hatopenshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:b46ba79afc5d78ee66d042599d1e7eae111edaa051eb5cc3a609a1b0f7a6ed04_amd64 as a component of Red Hat OpenShift Serverless 1.26*, openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:b46ba79afc5d78ee66d042599d1e7eae111edaa051eb5cc3a609a1b0f7a6ed04_amd64

…and 196 more

Timeline

  • Dec 13, 2022 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 30, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›