VDB
RHSA-2022:6348
RHSA-2022:6348
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, *, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, * |
| Red Hat | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64, rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64, rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, rhacm2/gatekeeper-rhel8@sha256:eff95e35e8c21910635c0e9be91ed18f2c451b8917d46a950961d5511696bca4_s390x, * |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64, rhacm2/gatekeeper-rhel8@sha256:9dbdd54c43380b31b011e902c58304da6ceee793a582d77cd399b59c387b9948_amd64 |
| Red Hat | rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64, rhacm2/gatekeeper-operator-bundle@sha256:2eaa1a0ba4303ecdfaf7870acf1e1f9e6240cf7b2367441966271bf40ecd5b05_amd64 |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64, rhacm2/gatekeeper-rhel8@sha256:2b507430d842bea4f97d376c924386b3c7f32eeab0178ece7b8253a307ffaf76_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:96cbe13312f0c9b551038e52eafe1644dc049c8aa337b6de3753ae60d91c227e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
| golang | go | |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x, rhacm2/gatekeeper-rhel8-operator@sha256:19297aefff113a20d310071bbcfb80d4311f5010254959d384f7024180c988db_s390x |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le, rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le, rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le, rhacm2/gatekeeper-rhel8@sha256:5619678366c310f54fe39b6b5db8db0e9093a0fc834cd6b67a8717ce1cbe0b81_ppc64le |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64, rhacm2/gatekeeper-rhel8-operator@sha256:16c624b8325f8abf00117c6a588c37c7059e6600ae5bed835b21a6f6627fa3da_arm64 |
| Red Hat | rhacm2/gatekeeper-rhel8-operator@sha256:5d61edc02a091e6ecab57aaad4eb7205ff5c19ef26a9169ebe99fda15bf599f5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, *, * |
Timeline
- Sep 6, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 6, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 10, 2026 Security Advisory
- May 15, 2026 Security Advisory
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2107388 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6348.json advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1962 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30630 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30631 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-30632 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107392 issue
- https://go.dev/issue/53616 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30629 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107371 issue
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107390 issue
- https://www.cve.org/CVERecord?id=CVE-2022-1705 advisory
- https://go.dev/issue/53416 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30635 advisory
- https://go.dev/issue/53615 advisory
- https://access.redhat.com/errata/RHSA-2022:6348 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107376 issue
- https://www.cve.org/CVERecord?id=CVE-2022-28131 advisory
…and 34 more