VDB
RHSA-2025%3A22684
RHSA-2025%3A22684
PUBLISHED
CVSS 7.5 HIGH
A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/prometheus-rhel9@sha256:59013004b241b2e796315d10df91c377e11741577567c590b4899da04560852b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, registry.redhat.io/rhacm2/prometheus-rhel9@sha256:59013004b241b2e796315d10df91c377e11741577567c590b4899da04560852b_amd64, registry.redhat.io/rhacm2/prometheus-rhel9@sha256:59013004b241b2e796315d10df91c377e11741577567c590b4899da04560852b_amd64 |
| Red Hat | registry.redhat.io/rhacm2/insights-client-rhel9@sha256:63a6a642eb3698ddfac90d89fc440c210b3b7349ba0a1ebee4488630b28183cd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/insights-client-rhel9@sha256:63a6a642eb3698ddfac90d89fc440c210b3b7349ba0a1ebee4488630b28183cd_s390x, *, * |
| Red Hat | registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:20c58b4d373208fcaffeb50ca196831bc1b73209d4933dd66acd63a9c90acead_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:20c58b4d373208fcaffeb50ca196831bc1b73209d4933dd66acd63a9c90acead_arm64, *, registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:20c58b4d373208fcaffeb50ca196831bc1b73209d4933dd66acd63a9c90acead_arm64 |
| Red Hat | registry.redhat.io/rhacm2/console-rhel9@sha256:b594422cdeb2fc1d3f4d66de9c7ee23dea22609b3ef801827f52b2627cc81c79_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/console-rhel9@sha256:b594422cdeb2fc1d3f4d66de9c7ee23dea22609b3ef801827f52b2627cc81c79_arm64, *, * |
| Red Hat | registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:4ef1e00af2b6d44a3d24ff50cf6903a42fbdbb0410841b92df5b34028333b058_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:4ef1e00af2b6d44a3d24ff50cf6903a42fbdbb0410841b92df5b34028333b058_amd64, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:4ef1e00af2b6d44a3d24ff50cf6903a42fbdbb0410841b92df5b34028333b058_amd64 |
| Red Hat | registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f542e80474d013295449d9b31a1e6b8f3c19da893cbdc02ac39b39b5c3a8ae80_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f542e80474d013295449d9b31a1e6b8f3c19da893cbdc02ac39b39b5c3a8ae80_arm64, registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f542e80474d013295449d9b31a1e6b8f3c19da893cbdc02ac39b39b5c3a8ae80_arm64, * |
| Red Hat | registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:31ae834bcb718b686e30bfa47de733405fec2a78ad331315f3c39d75e3268f99_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:31ae834bcb718b686e30bfa47de733405fec2a78ad331315f3c39d75e3268f99_ppc64le, registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:31ae834bcb718b686e30bfa47de733405fec2a78ad331315f3c39d75e3268f99_ppc64le, registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:31ae834bcb718b686e30bfa47de733405fec2a78ad331315f3c39d75e3268f99_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:3eb46c610db1610b8065c9e72ded3205609ff7890f1110fcc5446526b4861416_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:3eb46c610db1610b8065c9e72ded3205609ff7890f1110fcc5446526b4861416_s390x, registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:3eb46c610db1610b8065c9e72ded3205609ff7890f1110fcc5446526b4861416_s390x, * |
| Red Hat | registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:671dca36645022e9063a4a513e971ee270927a4987fc18a78d2f7a7a08cca348_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:671dca36645022e9063a4a513e971ee270927a4987fc18a78d2f7a7a08cca348_amd64, *, registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:671dca36645022e9063a4a513e971ee270927a4987fc18a78d2f7a7a08cca348_amd64 |
| Red Hat | registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:289757ac1d2f8807f9358de5abac8c99ea0eb1d61cc5150eb611dc7ff3ad3351_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, *, * |
| Red Hat | registry.redhat.io/rhacm2/console-rhel9@sha256:4960693eb612c65c900111246c1f5681b981513b49148ad6979639c82ac6870b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/console-rhel9@sha256:4960693eb612c65c900111246c1f5681b981513b49148ad6979639c82ac6870b_ppc64le, registry.redhat.io/rhacm2/console-rhel9@sha256:4960693eb612c65c900111246c1f5681b981513b49148ad6979639c82ac6870b_ppc64le, registry.redhat.io/rhacm2/console-rhel9@sha256:4960693eb612c65c900111246c1f5681b981513b49148ad6979639c82ac6870b_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:607c3a286a39915e0c34fe9d14fb474013c40369bb9505cdd45fc87c4f946905_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:607c3a286a39915e0c34fe9d14fb474013c40369bb9505cdd45fc87c4f946905_s390x, registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:607c3a286a39915e0c34fe9d14fb474013c40369bb9505cdd45fc87c4f946905_s390x, registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:607c3a286a39915e0c34fe9d14fb474013c40369bb9505cdd45fc87c4f946905_s390x |
| Red Hat | registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:72d814197a40add290ce77252f3541826c64bed61a09a20494f902fc9b872c1c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:72d814197a40add290ce77252f3541826c64bed61a09a20494f902fc9b872c1c_ppc64le, registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:72d814197a40add290ce77252f3541826c64bed61a09a20494f902fc9b872c1c_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:d91bf204588e019c68be8a3c8b07c6a72014fc7f192f9c91f9153882816d4fb4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:d91bf204588e019c68be8a3c8b07c6a72014fc7f192f9c91f9153882816d4fb4_ppc64le, *, * |
| Red Hat | registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:63a471062e882f7c945131b05c6cf0655a4d4f38dc52634951364361e7af13e4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:63a471062e882f7c945131b05c6cf0655a4d4f38dc52634951364361e7af13e4_amd64, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:63a471062e882f7c945131b05c6cf0655a4d4f38dc52634951364361e7af13e4_amd64, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:63a471062e882f7c945131b05c6cf0655a4d4f38dc52634951364361e7af13e4_amd64 |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:549655096c9c77159b8e0d37fd17bcd88cc8852e0ee85a5bba54cfad486b6e81_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:549655096c9c77159b8e0d37fd17bcd88cc8852e0ee85a5bba54cfad486b6e81_arm64, registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:549655096c9c77159b8e0d37fd17bcd88cc8852e0ee85a5bba54cfad486b6e81_arm64, registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:549655096c9c77159b8e0d37fd17bcd88cc8852e0ee85a5bba54cfad486b6e81_arm64 |
| Red Hat | registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:1139a534e9e4c42dd6a5381a81419ab50f10d6360b1c7239a8717db351f63739_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:1139a534e9e4c42dd6a5381a81419ab50f10d6360b1c7239a8717db351f63739_arm64, registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:1139a534e9e4c42dd6a5381a81419ab50f10d6360b1c7239a8717db351f63739_arm64 |
| Red Hat | registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f63bf240d195ee88063630dc28cc8e980fdaab7c74390bcd9a84cc459097d96d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f63bf240d195ee88063630dc28cc8e980fdaab7c74390bcd9a84cc459097d96d_arm64, registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f63bf240d195ee88063630dc28cc8e980fdaab7c74390bcd9a84cc459097d96d_arm64, registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f63bf240d195ee88063630dc28cc8e980fdaab7c74390bcd9a84cc459097d96d_arm64 |
| Red Hat | registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:ba2a04ce8cd5cc8221049896d4e1a46b4912e6f8213316020b3f40dfdacd7954_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | *, registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:ba2a04ce8cd5cc8221049896d4e1a46b4912e6f8213316020b3f40dfdacd7954_arm64, registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:ba2a04ce8cd5cc8221049896d4e1a46b4912e6f8213316020b3f40dfdacd7954_arm64 |
| Red Hat | registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3ba2bef8453d86b3662cd106cc465f84cfd8a47430ac937493c35bcfe1d211de_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 | registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3ba2bef8453d86b3662cd106cc465f84cfd8a47430ac937493c35bcfe1d211de_amd64, registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3ba2bef8453d86b3662cd106cc465f84cfd8a47430ac937493c35bcfe1d211de_amd64, registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3ba2bef8453d86b3662cd106cc465f84cfd8a47430ac937493c35bcfe1d211de_amd64 |
…and 334 more
Timeline
- Dec 3, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 26, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:22684 advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://access.redhat.com/security/cve/CVE-2025-27144 advisory
- https://access.redhat.com/security/cve/CVE-2025-47907 advisory
- https://access.redhat.com/security/cve/CVE-2025-53547 advisory
- https://access.redhat.com/security/cve/CVE-2025-58754 advisory
- https://access.redhat.com/security/cve/CVE-2025-7195 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22684.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
- https://go.dev/cl/569356 advisory
- https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ advisory
…and 29 more