CVE-2022-32149

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-32149", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "assignerShortName": "Go", "dateUpdated": "2025-05-15T20:35:11.868Z", "dateReserved": "2022-05-31T00:00:00.000Z", "datePublished": "2022-10-14T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2023-06-12T19:12:44.090Z"}, "title": "Denial of service via crafted Accept-Language header in golang.org/x/text/language", "descriptions": [{"lang": "en", "value": "An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse."}], "affected": [{"vendor": "golang.org/x/text", "product": "golang.org/x/text/language", "collectionURL": "https://pkg.go.dev", "packageName": "golang.org/x/text/language", "versions": [{"version": "0", "lessThan": "0.3.8", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "ParseAcceptLanguage"}, {"name": "MatchStrings"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE 400: Uncontrolled Resource Consumption"}]}], "references": [{"url": "https://go.dev/issue/56152"}, {"url": "https://go.dev/cl/442235"}, {"url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ"}, {"url": "https://pkg.go.dev/vuln/GO-2022-1059"}], "credits": [{"lang": "en", "value": "Adam Korczynski (ADA Logics)"}, {"lang": "en", "value": "OSS-Fuzz"}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20230203-0006/"}, {"url": "https://go.dev/issue/56152", "tags": ["x_transferred"]}, {"url": "https://go.dev/cl/442235", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2022-1059", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T07:32:56.022Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-15T20:34:55.435977Z", "id": "CVE-2022-32149", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-15T20:35:11.868Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-32149", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "assignerShortName": "Go", "dateUpdated": "2025-05-15T20:35:11.868Z", "dateReserved": "2022-05-31T00:00:00.000Z", "datePublished": "2022-10-14T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2023-06-12T19:12:44.090Z"}, "title": "Denial of service via crafted Accept-Language header in golang.org/x/text/language", "descriptions": [{"lang": "en", "value": "An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse."}], "affected": [{"vendor": "golang.org/x/text", "product": "golang.org/x/text/language", "collectionURL": "https://pkg.go.dev", "packageName": "golang.org/x/text/language", "versions": [{"version": "0", "lessThan": "0.3.8", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "ParseAcceptLanguage"}, {"name": "MatchStrings"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE 400: Uncontrolled Resource Consumption"}]}], "references": [{"url": "https://go.dev/issue/56152"}, {"url": "https://go.dev/cl/442235"}, {"url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ"}, {"url": "https://pkg.go.dev/vuln/GO-2022-1059"}], "credits": [{"lang": "en", "value": "Adam Korczynski (ADA Logics)"}, {"lang": "en", "value": "OSS-Fuzz"}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20230203-0006/"}, {"url": "https://go.dev/issue/56152", "tags": ["x_transferred"]}, {"url": "https://go.dev/cl/442235", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2022-1059", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T07:32:56.022Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-32149", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-15T20:34:55.435977Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-15T20:35:08.249Z"}}]}}

{"affected": [{"affectedData": [{"collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "packageName": "golang.org/x/text/language", "product": "golang.org/x/text/language", "programRoutines": [{"name": "ParseAcceptLanguage"}, {"name": "MatchStrings"}], "vendor": "golang.org/x/text", "versions": [{"lessThan": "0.3.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@golang.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:golang:text:*:*:*:*:*:*:*:*", "matchCriteriaId": "B60E2667-B233-430C-8BD7-28CDFFB1469F", "versionEndExcluding": "0.3.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse."}, {"lang": "es", "value": "Un atacante podr\u00eda causar una denegaci\u00f3n de servicio al dise\u00f1ar un encabezado Accept-Language que ParseAcceptLanguage tardar\u00eda mucho tiempo en analizar"}], "id": "CVE-2022-32149", "lastModified": "2026-06-17T04:46:45.967", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-32149", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-05-15T20:34:55.435977Z", "version": "2.0.3"}}]}, "published": "2022-10-14T15:15:34.543", "references": [{"source": "security@golang.org", "tags": ["Vendor Advisory"], "url": "https://go.dev/cl/442235"}, {"source": "security@golang.org", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://go.dev/issue/56152"}, {"source": "security@golang.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ"}, {"source": "security@golang.org", "tags": ["Vendor Advisory"], "url": "https://pkg.go.dev/vuln/GO-2022-1059"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://go.dev/cl/442235"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://go.dev/issue/56152"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://pkg.go.dev/vuln/GO-2022-1059"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20230203-0006/"}], "sourceIdentifier": "security@golang.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-772"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2022:7435", "cpe": "cpe:/a:redhat:logging:5.4::el8", "package": "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-300", "product_name": "Logging subsystem for Red Hat OpenShift 5.4", "release_date": "2022-11-16T00:00:00Z"}, {"advisory": "RHSA-2023:0692", "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.0::el8", "package": "oadp/oadp-velero-rhel8:1.0.7-5", "product_name": "OADP-1.0-RHEL-8", "release_date": "2023-02-09T00:00:00Z"}, {"advisory": "RHSA-2023:1042", "cpe": "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8", "impact": "low", "package": "custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8:2.8.2-143", "product_name": "OpenShift Custom Metrics Autoscaler 2", "release_date": "2023-03-06T00:00:00Z"}, {"advisory": "RHSA-2022:7407", "cpe": "cpe:/a:redhat:ocp_tools:4.9::el8", "package": "ocp-tools-4/service-binding-operator-bundle:v1.3.1-7", "product_name": "OpenShift Developer Tools and Services for OCP 4.9", "release_date": "2022-11-03T00:00:00Z"}, {"advisory": "RHSA-2022:7407", "cpe": "cpe:/a:redhat:ocp_tools:4.9::el8", "package": "ocp-tools-4/service-binding-rhel8-operator:v1.3.1-5", "product_name": "OpenShift Developer Tools and Services for OCP 4.9", "release_date": "2022-11-03T00:00:00Z"}, {"advisory": "RHSA-2022:6882", "cpe": "cpe:/a:redhat:logging:5.3::el8", "package": "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-302", "product_name": "OpenShift Logging 5.3", "release_date": "2022-11-09T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "lighthouse-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "lighthouse-coredns-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "subctl-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-gateway-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-globalnet-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-networkplugin-syncer-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0481", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-route-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-01-26T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "lighthouse-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "lighthouse-coredns-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "nettest-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "subctl-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-gateway-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-globalnet-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-networkplugin-syncer-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2023:0795", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-route-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2023-02-15T00:00:00Z"}, {"advisory": "RHSA-2024:1994", "cpe": "cpe:/a:redhat:rhel_eus:8.6", "package": "container-tools:rhel8-8060020240413110723.3b538bd8", "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support", "release_date": "2024-04-23T00:00:00Z"}, {"advisory": "RHSA-2024:2077", "cpe": "cpe:/a:redhat:rhel_eus:8.8", "package": "container-tools:rhel8-8080020240422101606.0f77c1b7", "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "release_date": "2024-04-29T00:00:00Z"}, {"advisory": "RHSA-2023:0693", "cpe": "cpe:/a:redhat:rhmt:1.7::el8", "package": "rhmtc/openshift-migration-velero-rhel8:v1.7.7-5", "product_name": "Red Hat Migration Toolkit for Containers 1.7", "release_date": "2023-02-09T00:00:00Z"}, {"advisory": "RHSA-2023:3613", "cpe": "cpe:/a:redhat:openshift:4.12::el8", "package": "podman-3:4.2.0-6.1.rhaos4.12.el8", "product_name": "Red Hat OpenShift Container Platform 4.12", "release_date": "2023-06-26T00:00:00Z"}, {"advisory": "RHSA-2023:3204", "cpe": "cpe:/a:redhat:container_native_virtualization:4.13::el7", "package": "kubevirt-0:4.13.0-1469.el7", "product_name": "RHEL-7-CNV-4.13", "release_date": "2023-05-18T00:00:00Z"}, {"advisory": "RHSA-2023:3204", "cpe": "cpe:/a:redhat:container_native_virtualization:4.13::el8", "package": "kubevirt-0:4.13.0-1469.el8", "product_name": "RHEL-8-CNV-4.13", "release_date": "2023-05-18T00:00:00Z"}, {"advisory": "RHSA-2023:3204", "cpe": "cpe:/a:redhat:container_native_virtualization:4.13::el9", "package": "kubevirt-0:4.13.0-1469.el9", "product_name": "RHEL-9-CNV-4.13", "release_date": "2023-05-18T00:00:00Z"}, {"advisory": "RHSA-2023:3205", "cpe": "cpe:/a:redhat:container_native_virtualization:4.13::el9", "package": "container-native-virtualization/virt-api-rhel9:v4.13.0-358", "product_name": "RHEL-9-CNV-4.13", "release_date": "2023-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:7434", "cpe": "cpe:/a:redhat:logging:5.5::el8", "package": "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-303", "product_name": "RHOL-5.5-RHEL-8", "release_date": "2022-11-10T00:00:00Z"}], "bugzilla": {"description": "golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags", "id": "2134010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2134010"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-407", "details": ["An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.", "A vulnerability was found in the golang.org/x/text/language package. An attacker can craft an Accept-Language header which ParseAcceptLanguage will take significant time to parse. This issue leads to a denial of service, and can impact availability."], "name": "CVE-2022-32149", "package_state": [{"cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2", "fix_state": "Not affected", "package_name": "migration-toolkit-virtualization/mtv-must-gather-api-rhel8", "product_name": "Migration Toolkit for Virtualization"}, {"cpe": "cpe:/a:redhat:ocp_tools", "fix_state": "Will not fix", "package_name": "odo", "product_name": "OpenShift Developer Tools and Services"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Will not fix", "package_name": "openshift-golang-builder-container", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/acm-cluster-proxy-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/acmesolver-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/acm-search-indexer-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/acm-search-v2-api-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/agent-service-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/assisted-installer-agent-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/assisted-installer-reporter-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/assisted-installer-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/cainjector-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/cert-manager-controller-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/cert-manager-webhook-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/config-policy-controller-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/discovery-rhel8-operator", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/gatekeeper-rhel8-operator", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/governance-policy-propagator-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/lighthouse-agent-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/lighthouse-coredns-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/multiclusterhub-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/registration-rhel8-operator", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/subctl-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-addon-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-gateway-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-globalnet-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-networkplugin-syncer-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-rhel8-operator", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/submariner-route-agent-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/thanos-rhel7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "package_name": "rhacm2/work-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:advanced_cluster_security:3", "fix_state": "Not affected", "package_name": "advanced-cluster-security/rhacs-main-rhel8", "product_name": "Red Hat Advanced Cluster Security 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "golang", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "container-tools:3.0/podman", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "container-tools:4.0/podman", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "container-tools:rhel8/podman", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "osbuild-composer", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "osbuild-composer", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "podman", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "ansible-service-broker", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-enterprise-service-catalog", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-descheduler", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-dockerregistry", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-service-idler", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-web-console", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-enterprise-autoheal", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-enterprise-cluster-capacity", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "atomic-openshift-service-idler", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "cri-tools", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "openshift", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift-golang-builder-container", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:assisted_installer:1", "fix_state": "Affected", "package_name": "rhai-tech-preview/assisted-installer-rhel8", "product_name": "Red Hat OpenShift Container Platform Assisted Installer 1"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/cephcsi-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/clair-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "go-toolset-7-golang", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:workload_availability_snr:0", "fix_state": "Affected", "package_name": "workload-availability/self-node-remediation-rhel8-operator", "product_name": "Self Node Remediation Operator"}], "public_date": "2022-10-11T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-32149\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-32149\nhttps://go.dev/issue/56152\nhttps://groups.google.com/g/golang-dev/c/qfPIly0X7aU"], "threat_severity": "Moderate"}

{}