VDB
RHSA-2022%3A9107
RHSA-2022%3A9107
PUBLISHED
CVSS 7.5 HIGH
A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-installer-artifacts@sha256:30411c165703d367d1c1a1a900024b9be85b417ca64650d3a63cb4357a6aaa4b_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:d10ddc5c8cea166b0ca976eba7247c66051ca55b180d6b9e6fbaae83f65dc320_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:d10ddc5c8cea166b0ca976eba7247c66051ca55b180d6b9e6fbaae83f65dc320_ppc64le |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:2b807325dd1583285a5e4af960a47222fbb01145eda7a18c430ba353d2b15371_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-agent-installer-api-server-rhel8@sha256:2b807325dd1583285a5e4af960a47222fbb01145eda7a18c430ba353d2b15371_s390x |
| Red Hat | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:8b3c47d2f4a9846159b9da2444cd111efa52a33d1a3d66fe0d9fa6178a520003_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:8b3c47d2f4a9846159b9da2444cd111efa52a33d1a3d66fe0d9fa6178a520003_ppc64le |
| Red Hat | openshift4/ose-cluster-monitoring-operator@sha256:ed6eec616b5398fbcb056af4913473eea95ee3d2e314d2f69f09375b0dc35d95_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-monitoring-operator@sha256:ed6eec616b5398fbcb056af4913473eea95ee3d2e314d2f69f09375b0dc35d95_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:4157b24b613a885fa78bca5ba7c3116756cc60b7970fdddb92222fa3c03a08a2_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ovn-kubernetes@sha256:4157b24b613a885fa78bca5ba7c3116756cc60b7970fdddb92222fa3c03a08a2_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:c68acaa690705b891249fc0536c31c5d398e3f6b6fdd3f6ec088a42fb4fa9c13_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-ironic-agent-rhel8@sha256:cdd1073206ee57a23b262d255faead3f899d4b16f7481b814e76af67ac5e23cc_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ironic-agent-rhel8@sha256:cdd1073206ee57a23b262d255faead3f899d4b16f7481b814e76af67ac5e23cc_arm64 |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:5567ca03961e318e4061247de00ff9a6348f219c550cceb41d081728433e3c2e_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-agent-installer-api-server-rhel8@sha256:5567ca03961e318e4061247de00ff9a6348f219c550cceb41d081728433e3c2e_arm64 |
| Red Hat | openshift4/ose-installer@sha256:dedb73c6c53d9f1c8435850bb5583c1d1b2b6086175c0315fc7caca90bdc9ced_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-installer@sha256:dedb73c6c53d9f1c8435850bb5583c1d1b2b6086175c0315fc7caca90bdc9ced_amd64 |
| Red Hat | openshift4/ose-console@sha256:49ddc7ca1856d414e6983c1343c3365228220a338e106965e05b6ef1b2a97e2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:9a25af39b585ac517d709d96d50dc839945f0e75cce39b39e8156f433b8174c7_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-coredns@sha256:3841ef68943b16cfa9ac4acad468610e3d973b6b75a7d41504265538043244bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-coredns@sha256:3841ef68943b16cfa9ac4acad468610e3d973b6b75a7d41504265538043244bb_ppc64le |
| Red Hat | openshift4/network-tools-rhel8@sha256:783b606f7ba1d6755649fc9c9ed4d45c5395bb49a782995230ccfa37d4728b8d_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:fc5681900c4fe09e9b2d36c225170c2c7c00b1cc1b1ade588c2be531ec0f9f58_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:fc5681900c4fe09e9b2d36c225170c2c7c00b1cc1b1ade588c2be531ec0f9f58_amd64 |
| Red Hat | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:595ed5581e97eea4391c90fb3ddc574780f102a28d22efafd65cb7c20a823744_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:595ed5581e97eea4391c90fb3ddc574780f102a28d22efafd65cb7c20a823744_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:4157b24b613a885fa78bca5ba7c3116756cc60b7970fdddb92222fa3c03a08a2_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-ovn-kubernetes@sha256:4157b24b613a885fa78bca5ba7c3116756cc60b7970fdddb92222fa3c03a08a2_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:319a650aac91c3608a03730efcf7a258384694c379a6a38d69f8c4242a9f55ad_s390x as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-must-gather@sha256:837527bb57d6b1f1b81cc2c0b405736d6c228cbf134e445beaa87766ca2ffedb_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-installer@sha256:771acc0fd9dfa22fa688b40683853327164bb37f62634e262a7682c75bd06f5a_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-installer@sha256:771acc0fd9dfa22fa688b40683853327164bb37f62634e262a7682c75bd06f5a_arm64 |
…and 148 more
Timeline
- Jan 4, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:9107 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2064702 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2067989 issue
- https://issues.redhat.com/browse/OCPBUGS-2123 advisory
- https://issues.redhat.com/browse/OCPBUGS-2443 advisory
- https://issues.redhat.com/browse/OCPBUGS-3116 advisory
- https://issues.redhat.com/browse/OCPBUGS-3614 advisory
- https://issues.redhat.com/browse/OCPBUGS-3674 advisory
- https://issues.redhat.com/browse/OCPBUGS-4103 advisory
- https://issues.redhat.com/browse/OCPBUGS-4324 advisory
- https://issues.redhat.com/browse/OCPBUGS-4376 advisory
- https://issues.redhat.com/browse/OCPBUGS-4386 advisory
- https://issues.redhat.com/browse/OCPBUGS-4405 advisory
- https://issues.redhat.com/browse/OCPBUGS-4408 advisory
- https://issues.redhat.com/browse/OCPBUGS-4529 advisory
- https://issues.redhat.com/browse/OCPBUGS-4564 advisory
- https://issues.redhat.com/browse/OCPBUGS-4618 advisory
- https://issues.redhat.com/browse/OCPBUGS-4640 advisory
- https://issues.redhat.com/browse/OCPBUGS-4655 advisory
…and 10 more