Red Hat Security Advisory

RHSA-2022:7434

Logging Subsystem 5.5.4 - Red Hat OpenShift security update

Released 2022-11-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2022-13882 CVE-2022-32149 · GHSA-69ch-w2m2-3vjp

MEDIUM 43

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01841 Published 2022-10-14 Partial fix · 0.3.8 CWE-772