VDB
RHSA-2025%3A22683
RHSA-2025%3A22683
PUBLISHED
CVSS 7.5 HIGH
A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2c93d5b59e2e3057575b308404fb6b6950ada596494b7cc790afd298ac4fda09_ppc64le as a component of multicluster engine for Kubernetes 2.7 | *, registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2c93d5b59e2e3057575b308404fb6b6950ada596494b7cc790afd298ac4fda09_ppc64le, registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2c93d5b59e2e3057575b308404fb6b6950ada596494b7cc790afd298ac4fda09_ppc64le |
| Red Hat | registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1a2ef170407505193e8d1ab4832ae0b945ec2fd9245c5a93134ce73f959ea34c_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1a2ef170407505193e8d1ab4832ae0b945ec2fd9245c5a93134ce73f959ea34c_amd64, registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1a2ef170407505193e8d1ab4832ae0b945ec2fd9245c5a93134ce73f959ea34c_amd64, registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1a2ef170407505193e8d1ab4832ae0b945ec2fd9245c5a93134ce73f959ea34c_amd64 |
| Red Hat | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a6332148fc73894438d9736d6fbb3a05949430e6b1535c20af530bd88d3c2a47_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a6332148fc73894438d9736d6fbb3a05949430e6b1535c20af530bd88d3c2a47_amd64, registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a6332148fc73894438d9736d6fbb3a05949430e6b1535c20af530bd88d3c2a47_amd64, registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a6332148fc73894438d9736d6fbb3a05949430e6b1535c20af530bd88d3c2a47_amd64 |
| Red Hat | registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:dd99548b21e36ba637fbf8e44f6062d2fec98abd536dba16e10475648664984e_s390x as a component of multicluster engine for Kubernetes 2.7 | *, *, registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:dd99548b21e36ba637fbf8e44f6062d2fec98abd536dba16e10475648664984e_s390x |
| Red Hat | registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d64f8dd4bc9c3c9cd4cde0d9c824a5554d3e3bad10cc45259f0cae1b49d60d72_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d64f8dd4bc9c3c9cd4cde0d9c824a5554d3e3bad10cc45259f0cae1b49d60d72_amd64, *, registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d64f8dd4bc9c3c9cd4cde0d9c824a5554d3e3bad10cc45259f0cae1b49d60d72_amd64 |
| Red Hat | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le, registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le, registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le |
| Red Hat | registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4f473bd04c4ad0bfccfee9298541e9368f1c83e38187513dd5b483d0a5afe95f_s390x as a component of multicluster engine for Kubernetes 2.7 | *, *, registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4f473bd04c4ad0bfccfee9298541e9368f1c83e38187513dd5b483d0a5afe95f_s390x |
| Red Hat | registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:c58d1015f276eb00d204e4e76c31862e83896697d145f2b02ade216a47fb13f5_ppc64le as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:c58d1015f276eb00d204e4e76c31862e83896697d145f2b02ade216a47fb13f5_ppc64le, *, registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:c58d1015f276eb00d204e4e76c31862e83896697d145f2b02ade216a47fb13f5_ppc64le |
| Red Hat | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le, *, registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415_ppc64le |
| Red Hat | registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6693b2725d9e2ca45f18b222126e01765af4b753982bf0fb22ec9fe1660159e7_s390x as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6693b2725d9e2ca45f18b222126e01765af4b753982bf0fb22ec9fe1660159e7_s390x, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6693b2725d9e2ca45f18b222126e01765af4b753982bf0fb22ec9fe1660159e7_s390x, * |
| Red Hat | registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8b8c1251816c0acf10a621f145a3ef8be31175128c88afc54cec772dfdb3662e_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8b8c1251816c0acf10a621f145a3ef8be31175128c88afc54cec772dfdb3662e_amd64, registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8b8c1251816c0acf10a621f145a3ef8be31175128c88afc54cec772dfdb3662e_amd64, * |
| Red Hat | registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b8e9e8ba56e74a8ca955d5e552ee7177c7468f7d32f0b0cecd5ec712641db09e_s390x as a component of multicluster engine for Kubernetes 2.7 | *, registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b8e9e8ba56e74a8ca955d5e552ee7177c7468f7d32f0b0cecd5ec712641db09e_s390x, registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b8e9e8ba56e74a8ca955d5e552ee7177c7468f7d32f0b0cecd5ec712641db09e_s390x |
| Red Hat | registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:a41375e857a8766ab2d82e296900fed5cdb4540c32e7386f100c5b3e1009fd99_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:a41375e857a8766ab2d82e296900fed5cdb4540c32e7386f100c5b3e1009fd99_amd64, *, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:a41375e857a8766ab2d82e296900fed5cdb4540c32e7386f100c5b3e1009fd99_amd64 |
| Red Hat | registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:399a470cd568c52ce90801aedaafdcbbc7541fd091dba253475f1e071859bc8b_ppc64le as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:399a470cd568c52ce90801aedaafdcbbc7541fd091dba253475f1e071859bc8b_ppc64le, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:399a470cd568c52ce90801aedaafdcbbc7541fd091dba253475f1e071859bc8b_ppc64le, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:399a470cd568c52ce90801aedaafdcbbc7541fd091dba253475f1e071859bc8b_ppc64le |
| Red Hat | registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:394431fb59a6869322cf0928ef267ac2f7ac5f2ea23c5baae56970f25c3de4ea_amd64 as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:394431fb59a6869322cf0928ef267ac2f7ac5f2ea23c5baae56970f25c3de4ea_amd64, registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:394431fb59a6869322cf0928ef267ac2f7ac5f2ea23c5baae56970f25c3de4ea_amd64, registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:394431fb59a6869322cf0928ef267ac2f7ac5f2ea23c5baae56970f25c3de4ea_amd64 |
| Red Hat | registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427_s390x as a component of multicluster engine for Kubernetes 2.7 | *, registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427_s390x, * |
| Red Hat | registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2ed8c05413a5bcece9c400b456dbe65c815c834d7cd9ebcbfe22be6477e243c4_s390x as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2ed8c05413a5bcece9c400b456dbe65c815c834d7cd9ebcbfe22be6477e243c4_s390x, *, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2ed8c05413a5bcece9c400b456dbe65c815c834d7cd9ebcbfe22be6477e243c4_s390x |
| Red Hat | registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1c0578edd80cc9e3d2418ce0514996c80187f21ee1fb8f3012a7f18331e6d5e5_ppc64le as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1c0578edd80cc9e3d2418ce0514996c80187f21ee1fb8f3012a7f18331e6d5e5_ppc64le, registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1c0578edd80cc9e3d2418ce0514996c80187f21ee1fb8f3012a7f18331e6d5e5_ppc64le, * |
| Red Hat | registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427_s390x as a component of multicluster engine for Kubernetes 2.7 | registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427_s390x, *, registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427_s390x |
| Red Hat | registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bab320462a18bc6d9e980336a1e5c08717bd4d104c4ea7ca63f0eb0ccbaf979e_ppc64le as a component of multicluster engine for Kubernetes 2.7 | *, registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bab320462a18bc6d9e980336a1e5c08717bd4d104c4ea7ca63f0eb0ccbaf979e_ppc64le, registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bab320462a18bc6d9e980336a1e5c08717bd4d104c4ea7ca63f0eb0ccbaf979e_ppc64le |
…and 196 more
Timeline
- Dec 3, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:22683 advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://access.redhat.com/security/cve/CVE-2025-22871 advisory
- https://access.redhat.com/security/cve/CVE-2025-7195 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22683.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
- https://go.dev/cl/569356 advisory
- https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ advisory
- https://pkg.go.dev/vuln/GO-2024-2611 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2376300 issue
- https://www.cve.org/CVERecord?id=CVE-2025-7195 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-7195 advisory
…and 7 more