Skip to content
OpenAdvisories
Unscored RHSA-2022:4860 3 CVEs

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.1

Published Sep 30, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:1.1.0-3.el8

Vulnerabilities 3

  • Unscored —
    CVE-2022-23772

    Uncontrolled memory consumption in math/big

    Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2022-23773 Public exploit

    Incorrect access control in the go command in cmd/go/internal/modfetch

    cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

    golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2022-23806

    Incorrect computation for some invalid field elements in crypto/elliptic

    Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

    golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2053429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2053532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2053541
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4860.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-23772
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23772
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23772
  • article
    https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
  • report
    https://access.redhat.com/security/cve/CVE-2022-23773
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23773
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23773
  • report
    https://access.redhat.com/security/cve/CVE-2022-23806
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23806
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23806