Red Hat Security AdvisoryRHSA-2022:6714
RHACS 3.72 enhancement and security update
Released 2022-09-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHACS 3.72 for RHEL 8 advanced-cluster-security/rhacs-docs-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +3
Fixes 5 records
Priority MEDIUM 45
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0995 · Published 2022-04-20 · Partial fix CWE-674
Priority MEDIUM 40
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0416 · Published 2022-04-20 · Partial fix
Priority LOW 39
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03228 · Published 2022-03-05 · Partial fix CWE-674
Priority LOW 37
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02186 · Published 2022-08-09 · Partial fix · 1.17.12, 1.18.4 CWE-674
Priority LOW 29
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02951 · Published 2022-06-22 · Partial fix · 0.0.0-20220412211240-33da011f77ad CWE-269
THREATIST.IORead the docs