Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• High 7.5
  CVE-2022-30630

  Stack exhaustion in Glob on certain paths in io/fs

  Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.

  Go standard library io/fs golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• High 7.5
  CVE-2022-30631

  Stack exhaustion when reading certain archives in compress/gzip

  Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.

  Go standard library compress/gzip golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• High 7.5
  CVE-2022-30633

  Stack exhaustion when unmarshaling certain documents in encoding/xml

  Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag.

  Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• High 7.5
  CVE-2022-30635

  Stack exhaustion when decoding certain messages in encoding/gob

  Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.

  Go standard library encoding/gob golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• Medium 6.5
  CVE-2022-1705

  Improper sanitization of Transfer-Encoding headers in net/http

  Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.

  Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• Medium 6.5
  CVE-2022-32148

  Exposure of client IP addresses in net/http

  Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set …

  Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• Medium 5.5
  CVE-2022-1962

  Stack exhaustion due to deeply nested types in go/parser

  Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

  Go standard library go/parser golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• Unscored —
  CVE-2022-28131

  Stack exhaustion from deeply nested XML documents in encoding/xml

  Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.

  Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022
• Unscored —
  CVE-2022-30632

  Stack exhaustion on crafted paths in path/filepath

  Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.

  Go standard library path/filepath golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022

Revision history

1. 2026-02-16 #42

   Neue Updates von Red Hat aufgenommen

2. 2026-02-05 #41

   Neue Updates von Red Hat aufgenommen

3. 2025-12-17 #40

   Neue Updates von Red Hat aufgenommen

4. 2025-11-27 #39

   Neue Updates von Red Hat aufgenommen

5. 2025-04-29 #38

   Neue Updates von Amazon aufgenommen

6. 2024-04-29 #37

   Neue Updates von Red Hat aufgenommen

7. 2024-03-19 #36

   Neue Updates von Red Hat aufgenommen

8. 2024-02-28 #35

   Neue Updates von Red Hat aufgenommen

9. 2024-02-11 #34

   Neue Updates von Red Hat aufgenommen

10. 2023-06-15 #33

    Neue Updates von Red Hat aufgenommen

11. 2023-05-16 #32

    Neue Updates von Red Hat aufgenommen

12. 2023-03-15 #31

    Neue Updates von Red Hat aufgenommen

13. 2023-01-24 #30

    Neue Updates von Red Hat aufgenommen

14. 2023-01-17 #29

    Neue Updates von Red Hat aufgenommen

15. 2022-12-14 #28

    Neue Updates von Red Hat aufgenommen

16. 2022-11-28 #27

    Neue Updates von Red Hat aufgenommen

17. 2022-11-27 #26

    Neue Updates von Red Hat aufgenommen

18. 2022-11-23 #25

    Neue Updates von Oracle Linux aufgenommen

19. 2022-11-15 #24

    Neue Updates von Red Hat aufgenommen

20. 2022-11-08 #23

    Neue Updates von Red Hat aufgenommen

21. 2022-10-25 #22

    Neue Updates von Red Hat und Oracle Linux aufgenommen

22. 2022-10-23 #21

    Neue Updates von Amazon aufgenommen

23. 2022-10-19 #20

    Neue Updates von Red Hat aufgenommen

24. 2022-10-13 #19

    Neue Updates von Amazon aufgenommen

25. 2022-09-29 #18

    Neue Updates von Amazon aufgenommen

References

• Red Hat Security Advisory RHSA-2022:5775 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5775
• Red Hat Security Advisory RHSA-2022:5799 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5799
• Red Hat Security Advisory RHSA-2022:5866 vom 2022-08-03
  https://access.redhat.com/errata/RHSA-2022:5866
• Oracle Linux Security Advisory ELSA-2022-5799 vom 2022-08-02
  http://linux.oracle.com/errata/ELSA-2022-5799.html
• Oracle Linux Security Advisory ELSA-2022-5775 vom 2022-08-04
  http://linux.oracle.com/errata/ELSA-2022-5775.html
• SUSE Security Update SUSE-SU-2022:2671-1 vom 2022-08-04
  https://lists.suse.com/pipermail/sle-security-updates/2022-August/011802.html
• Red Hat Security Advisory RHSA-2022:5924 vom 2022-08-09
  https://access.redhat.com/errata/RHSA-2022:5924
• Red Hat Security Advisory RHSA-2022:5923 vom 2022-08-08
  https://access.redhat.com/errata/RHSA-2022:5923
• Red Hat Security Advisory RHSA-2022:5875 vom 2022-08-09
  https://access.redhat.com/errata/RHSA-2022:5875
• Gentoo Linux Security Advisory GLSA-202208-02 vom 2022-08-09
  https://security.gentoo.org/glsa/202208-02
• Red Hat Security Advisory RHSA-2022:6042 vom 2022-08-10
  https://access.redhat.com/errata/RHSA-2022:6042
• Red Hat Security Advisory RHSA-2022:6040 vom 2022-08-10
  https://access.redhat.com/errata/RHSA-2022:6040
• Red Hat Security Advisory RHSA-2022:6066 vom 2022-08-15
  https://www.cybersecurity-help.cz/vdb/SB2022081537
• Red Hat Security Advisory RHSA-2022:6065 vom 2022-08-15
  https://www.cybersecurity-help.cz/vdb/SB2022081538
• Red Hat Security Advisory RHSA-2022:6113 vom 2022-08-18
  https://access.redhat.com/errata/RHSA-2022:6113
• Red Hat Security Advisory RHSA-2022:6051 vom 2022-08-18
  https://access.redhat.com/errata/RHSA-2022:6051
• Red Hat Security Advisory RHSA-2022:6053 vom 2022-08-23
  https://access.redhat.com/errata/RHSA-2022:6053
• Red Hat Security Advisory RHSA-2022:6184 vom 2022-08-25
  https://access.redhat.com/errata/RHSA-2022:6184
• Red Hat Security Advisory RHSA-2022:6188 vom 2022-08-25
  https://access.redhat.com/errata/RHSA-2022:6188
• Red Hat Security Advisory RHSA-2022:6187 vom 2022-08-25
  https://access.redhat.com/errata/RHSA-2022:6187
• Red Hat Security Advisory RHSA-2022:6290 vom 2022-09-01
  https://access.redhat.com/errata/RHSA-2022:6290
• Red Hat Security Advisory RHSA-2022:6283 vom 2022-09-01
  https://access.redhat.com/errata/RHSA-2022:6283
• Red Hat Security Advisory RHSA-2022:6152 vom 2022-09-01
  https://access.redhat.com/errata/RHSA-2022:6152
• Red Hat Security Advisory RHSA-2022:6346 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6346
• Red Hat Security Advisory RHSA-2022:6345 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6345
• Red Hat Security Advisory RHSA-2022:6183 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6183
• Red Hat Security Advisory RHSA-2022:6347 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6347
• Red Hat Security Advisory RHSA-2022:6348 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6348
• Red Hat Security Advisory RHSA-2022:6370 vom 2022-09-07
  https://access.redhat.com/errata/RHSA-2022:6370
• Red Hat Security Advisory RHSA-2022:6182 vom 2022-09-06
  https://access.redhat.com/errata/RHSA-2022:6182
• Red Hat Security Advisory RHSA-2022:6344 vom 2022-09-07
  https://access.redhat.com/errata/RHSA-2022:6344
• Red Hat Security Advisory RHSA-2022:6262 vom 2022-09-09
  https://access.redhat.com/errata/RHSA-2022:6262
• Red Hat Security Advisory RHSA-2022:6430 vom 2022-09-13
  https://access.redhat.com/errata/RHSA-2022:6430
• Red Hat Security Advisory RHSA-2022:6517 vom 2022-09-14
  https://access.redhat.com/errata/RHSA-2022:6517
• Red Hat Security Advisory RHSA-2022:6308 vom 2022-09-15
  https://access.redhat.com/errata/RHSA-2022:6308
• Red Hat Security Advisory RHSA-2022:6560 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6560
• Red Hat Security Advisory RHSA-2022:6714 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6714
• Amazon Linux Security Advisory ALAS-2022-133 vom 2022-09-29
  https://alas.aws.amazon.com/AL2022/ALAS-2022-133.html
• Amazon Linux Security Advisory ALAS2DOCKER-2022-020 vom 2022-10-14
  https://alas.aws.amazon.com/AL2/ALASDOCKER-2022-020.html
• Red Hat Security Advisory RHSA-2022:7058 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7058
• Amazon Linux Security Advisory ALAS2-2022-1859 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1859.html
• Amazon Linux Security Advisory ALAS2-2022-1865 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1865.html
• Amazon Linux Security Advisory ALAS2-2022-1861 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1861.html
• Amazon Linux Security Advisory ALAS2-2022-1860 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1860.html
• Amazon Linux Security Advisory ALAS2-2022-1862 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1862.html
• Amazon Linux Security Advisory ALAS2-2022-1863 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1863.html
• Amazon Linux Security Advisory ALAS2-2022-1858 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1858.html
• Amazon Linux Security Advisory ALAS2-2022-1864 vom 2022-10-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1864.html
• Red Hat Security Advisory RHSA-2022:7129 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7129
• Oracle Linux Security Advisory ELSA-2022-7129 vom 2022-10-26
  https://linux.oracle.com/errata/ELSA-2022-7129.html
• Red Hat Security Advisory RHSA-2022:7519 vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7519
• Red Hat Security Advisory RHSA-2022:7648 vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7648
• Red Hat Security Advisory RHSA-2022:7529 vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7529
• Red Hat Security Advisory RHSA-2022:8057 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8057
• Red Hat Security Advisory RHSA-2022:8098 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8098
• Red Hat Security Advisory RHSA-2022:8250 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8250
• Oracle Linux Security Advisory ELSA-2022-24267 vom 2022-11-23
  https://linux.oracle.com/errata/ELSA-2022-24267.html
• Red Hat Security Advisory RHSA-2022:8634 vom 2022-11-28
  https://access.redhat.com/errata/RHSA-2022:8634
• Red Hat Security Advisory RHSA-2022:8626 vom 2022-11-29
  https://access.redhat.com/errata/RHSA-2022:8626
• Red Hat Security Advisory RHSA-2022:9047 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9047
• Red Hat Security Advisory RHSA-2022:7398 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2022:7398
• Red Hat Security Advisory RHSA-2023:0407 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0407
• Red Hat Security Advisory RHSA-2023:1275 vom 2023-03-15
  https://access.redhat.com/errata/RHSA-2023:1275
• Red Hat Security Advisory RHSA-2023:2758 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:2758
• Red Hat Security Advisory RHSA-2023:2802 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:2802
• Red Hat Security Advisory RHSA-2023:3642 vom 2023-06-15
  https://access.redhat.com/errata/RHSA-2023:3642
• Red Hat Security Advisory RHSA-2024:0778 vom 2024-02-12
  https://access.redhat.com/errata/RHSA-2024:0778
• Red Hat Security Advisory RHSA-2024:1027 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2024:1027
• Red Hat Security Advisory RHSA-2024:1433 vom 2024-03-20
  https://access.redhat.com/errata/RHSA-2024:1433
• Red Hat Security Advisory RHSA-2024:2180 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2180
• Amazon Linux Security Advisory ALASECS-2025-057 vom 2025-04-29
  https://alas.aws.amazon.com/AL2/ALASECS-2025-057.html
• Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2025-055 vom 2025-04-29
  https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2025-055.html
• Red Hat Security Advisory RHSA-2025:22287 vom 2025-11-27
  https://access.redhat.com/errata/RHSA-2025:22287
• Rocky Linux Security Advisory RLSA-2023:2758 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:2758
• Rocky Linux Security Advisory RLSA-2023:2802 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:2802
• Red Hat Security Advisory RHSA-2025:23546 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23546
• Red Hat Security Advisory RHSA-2026:2164 vom 2026-02-05
  https://access.redhat.com/errata/RHSA-2026:2164
• Red Hat Security Advisory RHSA-2026:2762 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2762
• Red Hat Security Advisory RHSA-2026:2754 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2754
• Red Hat Security Advisory RHSA-2026:2681 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2681