Every CVE Search/ Get API key

CVE-2022-41717

Excessive memory growth in net/http and golang.org/x/net/http2

5.3 MediumPublic exploitFix available

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

6.08%Up 5.1 points since Dec 9, 2022
90%50%10%1%

What each source reports

NVD Score used 5.3

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
CVE-2022-41717
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

Excessive memory growth in net/http and golang.org/x/net/http2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
CVE-2022-41717
Updated
2026-11-02
EUVDEUVD-2022-7776 No score

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
EUVD-2022-7776
Updated
2026-11-03
GitHub AdvisoriesGHSA-xrjj-mj9h-534m 5.3

golang.org/x/net/http2 vulnerable to possible excessive memory growth

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
GHSA-xrjj-mj9h-534m
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2022-41717 5.3

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
ALPINE-CVE-2022-41717
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
OSVAZL-11582 5.3

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-11582
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 48 moreShow less
OSVAZL-33568 5.3

CVE-2022-41717 affecting package azcopy for versions less than 10.24.0-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33568
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-33573 5.3

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33573
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-33582 5.3

CVE-2022-41717 affecting package gh for versions less than 2.13.0-2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33582
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-33617 5.3

CVE-2022-41717 affecting package moby-cli for versions less than 24.0.9-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33617
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-33630 5.3

CVE-2022-41717 affecting package prometheus for versions less than 2.37.9-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33630
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-33645 5.3

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.6.2-2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-33645
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-34276 5.3

CVE-2022-41717 affecting package nmi for versions less than 1.8.17-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-34276
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-34750 5.3

CVE-2022-41717 affecting package golang for versions less than 1.17.13-2,1.18.8-2,1.21.6-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-34750
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-35011 5.3

CVE-2022-41717 affecting package moby-engine for versions less than 25.0.3-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-35011
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-35113 5.3

CVE-2022-41717 affecting package prometheus for versions less than 2.45.4-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-35113
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-35284 5.3

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-35284
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-37311 5.3

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-37311
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-37374 5.3

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-37374
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-43744 5.3

CVE-2022-41717 affecting package podman 4.1.1-26

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-43744
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-44487 5.3

CVE-2022-41717 affecting package podman for versions less than 5.6.1-2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-44487
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-79004 5.3

CVE-2022-41717 affecting package golang 1.25.7-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-79004
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-98874 5.3

CVE-2022-41717 affecting package golang 1.27.1-1

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
AZL-98874
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVBELL-CVE-2022-41717 5.3

CVE-2022-41717 does not affect BellSoft software

Record
BELL-CVE-2022-41717
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVGHSA-xrjj-mj9h-534m 5.3

golang.org/x/net/http2 vulnerable to possible excessive memory growth

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Record
GHSA-xrjj-mj9h-534m
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-770
Updated
2026-11-02
OSVOESA-2023-1080 5.3

golang security update

The Go Programming Language

Security Fix(es):

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.(CVE-2022-41717)

Record
OESA-2023-1080
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVOESA-2023-1081 5.3

golang security update

The Go Programming Language

Security Fix(es):

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.(CVE-2022-41717)

Record
OESA-2023-1081
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVOESA-2023-1082 5.3

golang security update

The Go Programming Language

Security Fix(es):

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.(CVE-2022-41717)

Record
OESA-2023-1082
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVOESA-2023-1093 5.3

golang security update

The Go Programming Language

Security Fix(es):

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.(CVE-2022-41717)

Record
OESA-2023-1093
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:0328 7.5

Red Hat Security Advisory: go-toolset and golang security and bug fix update

Record
RHSA-2023:0328
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:0446 7.5

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Record
RHSA-2023:0446
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:1179 5.3

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.27.1

Record
RHSA-2023:1179
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:1268 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.12.8 security update

Record
RHSA-2023:1268
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1275 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform (etcd) security update

Record
RHSA-2023:1275
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1276 5.3

Red Hat Security Advisory: Red Hat OpenStack Platform (collectd-libpod-stats) security update

Record
RHSA-2023:1276
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:1325 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Record
RHSA-2023:1325
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1329 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.0 bug fix and security update

Record
RHSA-2023:1329
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2204 7.5

Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Record
RHSA-2023:2204
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2222 5.3

Red Hat Security Advisory: conmon security and bug fix update

Record
RHSA-2023:2222
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:2236 6.5

Red Hat Security Advisory: toolbox security and bug fix update

Record
RHSA-2023:2236
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2253 5.3

Red Hat Security Advisory: buildah security and bug fix update

Record
RHSA-2023:2253
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:2282 5.3

Red Hat Security Advisory: podman security and bug fix update

Record
RHSA-2023:2282
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:2283 5.3

Red Hat Security Advisory: skopeo security and bug fix update

Record
RHSA-2023:2283
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:2357 7.5

Red Hat Security Advisory: git-lfs security and bug fix update

Record
RHSA-2023:2357
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2367 5.3

Red Hat Security Advisory: containernetworking-plugins security and bug fix update

Record
RHSA-2023:2367
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2023:2758 7.5

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Record
RHSA-2023:2758
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2780 7.5

Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Record
RHSA-2023:2780
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2802 7.5

Red Hat Security Advisory: container-tools:4.0 security and bug fix update

Record
RHSA-2023:2802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2866 7.5

Red Hat Security Advisory: git-lfs security and bug fix update

Record
RHSA-2023:2866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:3204 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.13.0 RPMs security and bug fix update

Record
RHSA-2023:3204
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:3612 9.8

Red Hat Security Advisory: OpenShift Container Platform 4.13.4 packages and security update

Record
RHSA-2023:3612
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3910 8.1

Red Hat Security Advisory: Red Hat OpenShift Enterprise security update

Record
RHSA-2023:3910
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3914 8.1

Red Hat Security Advisory: Red Hat OpenShift Enterprise security update

Record
RHSA-2023:3914
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4470 9.8

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update

Record
RHSA-2023:4470
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/net/http2
Go
 before 0.4.0
0.4.0
golang.org/x/net
Go
 before 0.4.0
0.4.0
go
Alpine:v3.17
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.18
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.19
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.20
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.21
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.22
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.23
 1.19.0 up to 1.19.4-r0
1.19.4-r0
go
Alpine:v3.24
 1.19.0 up to 1.19.4-r0
1.19.4-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
minio-client
Alpine:v3.18
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.19
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.20
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.21
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.22
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.23
 before 0.20230111.031416-r0
0.20230111.031416-r0
minio-client
Alpine:v3.24
 before 0.20230111.031416-r0
0.20230111.031416-r0
osbuild-composer
AlmaLinux:9
From an advisory covering 5 CVEs
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-core
AlmaLinux:9
From an advisory covering 5 CVEs
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-dnf-json
AlmaLinux:9
From an advisory covering 5 CVEs
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-worker
AlmaLinux:9
From an advisory covering 5 CVEs
 before 76-2.el9_2.alma
76-2.el9_2.alma
weldr-client
AlmaLinux:9
From an advisory covering 5 CVEs
 before 35.9-1.el9
35.9-1.el9
conmon
AlmaLinux:9
 before 2:2.1.7-1.el9_2
2:2.1.7-1.el9_2
toolbox
AlmaLinux:9
From an advisory covering 3 CVEs
 before 0.0.99.3-9.el9
0.0.99.3-9.el9
toolbox-tests
AlmaLinux:9
From an advisory covering 3 CVEs
 before 0.0.99.3-9.el9
0.0.99.3-9.el9
buildah
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1:1.29.1-1.el9
1:1.29.1-1.el9
buildah-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1:1.29.1-1.el9
1:1.29.1-1.el9
podman
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
podman-docker
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
podman-gvproxy
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
podman-plugins
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
podman-remote
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
podman-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:4.4.1-3.el9
2:4.4.1-3.el9
skopeo
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.11.2-0.1.el9
2:1.11.2-0.1.el9
skopeo-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.11.2-0.1.el9
2:1.11.2-0.1.el9
git-lfs
AlmaLinux:9
From an advisory covering 10 CVEs
 before 3.2.0-1.el9
3.2.0-1.el9
containernetworking-plugins
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1:1.2.0-1.el9
1:1.2.0-1.el9
aardvark-dns
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.5.0-2.module_el8.8.0+3470+252b1910
2:1.5.0-2.module_el8.8.0+3470+252b1910
buildah
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.29.1-1.module_el8.8.0+3470+252b1910
1:1.29.1-1.module_el8.8.0+3470+252b1910
buildah-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.29.1-1.module_el8.8.0+3470+252b1910
1:1.29.1-1.module_el8.8.0+3470+252b1910
cockpit-podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 63.1-1.module_el8.8.0+3557+7ba9cc13
63.1-1.module_el8.8.0+3557+7ba9cc13
conmon
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:2.1.6-1.module_el8.8.0+3470+252b1910
3:2.1.6-1.module_el8.8.0+3470+252b1910
container-selinux
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:2.205.0-2.module_el8.8.0+3557+7ba9cc13
2:2.205.0-2.module_el8.8.0+3557+7ba9cc13
containernetworking-plugins
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.2.0-1.module_el8.8.0+3470+252b1910
1:1.2.0-1.module_el8.8.0+3470+252b1910
containers-common
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1-63.module_el8.8.0+3568+e8578284
2:1-63.module_el8.8.0+3568+e8578284
crit
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu-libs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
crun
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.8.1-2.module_el8.8.0+3568+e8578284
1.8.1-2.module_el8.8.0+3568+e8578284
fuse-overlayfs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.10-1.module_el8.8.0+3470+252b1910
1.10-1.module_el8.8.0+3470+252b1910
libslirp
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.7.0+3407+95aa0ca9
4.4.0-1.module_el8.7.0+3407+95aa0ca9
libslirp-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.7.0+3407+95aa0ca9
4.4.0-1.module_el8.7.0+3407+95aa0ca9
netavark
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.5.0-4.module_el8.8.0+3470+252b1910
2:1.5.0-4.module_el8.8.0+3470+252b1910
oci-seccomp-bpf-hook
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.2.8-1.module_el8.8.0+3470+252b1910
1.2.8-1.module_el8.8.0+3470+252b1910
podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-catatonit
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-docker
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-gvproxy
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-plugins
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-remote
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
python3-criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
python3-podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.1-1.module_el8.8.0+3470+252b1910
4.4.1-1.module_el8.8.0+3470+252b1910
runc
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.1.4-1.module_el8.7.0+3407+95aa0ca9
1:1.1.4-1.module_el8.7.0+3407+95aa0ca9
skopeo
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.11.2-0.2.module_el8.8.0+3470+252b1910
2:1.11.2-0.2.module_el8.8.0+3470+252b1910
skopeo-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.11.2-0.2.module_el8.8.0+3470+252b1910
2:1.11.2-0.2.module_el8.8.0+3470+252b1910
slirp4netns
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.2.0-2.module_el8.7.0+3407+95aa0ca9
1.2.0-2.module_el8.7.0+3407+95aa0ca9
toolbox
AlmaLinux:8
From an advisory covering 14 CVEs
 before 0.0.99.3-7.module_el8.8.0+3470+252b1910
0.0.99.3-7.module_el8.8.0+3470+252b1910
toolbox-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 0.0.99.3-7.module_el8.8.0+3470+252b1910
0.0.99.3-7.module_el8.8.0+3470+252b1910
udica
AlmaLinux:8
From an advisory covering 14 CVEs
 before 0.2.6-20.module_el8.8.0+3470+252b1910
0.2.6-20.module_el8.8.0+3470+252b1910
osbuild-composer
AlmaLinux:8
From an advisory covering 5 CVEs
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-dnf-json
AlmaLinux:8
From an advisory covering 5 CVEs
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-worker
AlmaLinux:8
From an advisory covering 5 CVEs
 before 75-1.el8.alma
75-1.el8.alma
weldr-client
AlmaLinux:8
From an advisory covering 5 CVEs
 before 35.9-2.el8
35.9-2.el8
aardvark-dns
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.0.1-37.module_el8.8.0+3468+16b86c82
2:1.0.1-37.module_el8.8.0+3468+16b86c82
buildah
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.24.6-5.module_el8.8.0+3468+16b86c82
1:1.24.6-5.module_el8.8.0+3468+16b86c82
buildah-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.24.6-5.module_el8.8.0+3468+16b86c82
1:1.24.6-5.module_el8.8.0+3468+16b86c82
cockpit-podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 46-1.module_el8.7.0+3344+5bcd850f
46-1.module_el8.7.0+3344+5bcd850f
conmon
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:2.1.4-1.module_el8.7.0+3344+5bcd850f
2:2.1.4-1.module_el8.7.0+3344+5bcd850f
container-selinux
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:2.199.0-1.module_el8.8.0+3468+16b86c82
2:2.199.0-1.module_el8.8.0+3468+16b86c82
containernetworking-plugins
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.1.1-2.module_el8.7.0+3344+5bcd850f
1:1.1.1-2.module_el8.7.0+3344+5bcd850f
containers-common
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1-37.module_el8.8.0+3468+16b86c82
2:1-37.module_el8.8.0+3468+16b86c82
crit
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
crit
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
criu-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
criu-libs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu-libs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
crun
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.6-1.module_el8.8.0+3468+16b86c82
1.6-1.module_el8.8.0+3468+16b86c82
fuse-overlayfs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.9-1.module_el8.7.0+3344+5bcd850f
1.9-1.module_el8.7.0+3344+5bcd850f
libslirp
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.6.0+2877+8e437bf5
4.4.0-1.module_el8.6.0+2877+8e437bf5
libslirp
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.6.0+3137+d33c3efb
4.4.0-1.module_el8.6.0+3137+d33c3efb
libslirp-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.6.0+3137+d33c3efb
4.4.0-1.module_el8.6.0+3137+d33c3efb
libslirp-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.4.0-1.module_el8.6.0+2877+8e437bf5
4.4.0-1.module_el8.6.0+2877+8e437bf5
netavark
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.0.1-37.module_el8.8.0+3468+16b86c82
2:1.0.1-37.module_el8.8.0+3468+16b86c82
oci-seccomp-bpf-hook
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.2.5-2.module_el8.8.0+3468+16b86c82
1.2.5-2.module_el8.8.0+3468+16b86c82
podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-catatonit
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-docker
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-gvproxy
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-plugins
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-remote
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
podman-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:4.0.2-20.module_el8.8.0+3468+16b86c82
2:4.0.2-20.module_el8.8.0+3468+16b86c82
python3-criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
python3-criu
AlmaLinux:8
From an advisory covering 14 CVEs
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
python3-podman
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.0.0-1.module_el8.6.0+2877+8e437bf5
4.0.0-1.module_el8.6.0+2877+8e437bf5
runc
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1:1.1.4-1.module_el8.7.0+3344+5bcd850f
1:1.1.4-1.module_el8.7.0+3344+5bcd850f
skopeo
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.6.2-6.module_el8.8.0+3468+16b86c82
2:1.6.2-6.module_el8.8.0+3468+16b86c82
skopeo-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 2:1.6.2-6.module_el8.8.0+3468+16b86c82
2:1.6.2-6.module_el8.8.0+3468+16b86c82
slirp4netns
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.1.8-2.module_el8.6.0+2877+8e437bf5
1.1.8-2.module_el8.6.0+2877+8e437bf5
slirp4netns
AlmaLinux:8
From an advisory covering 14 CVEs
 before 1.1.8-2.module_el8.6.0+3137+d33c3efb
1.1.8-2.module_el8.6.0+3137+d33c3efb
toolbox
AlmaLinux:8
From an advisory covering 14 CVEs
 before 0.0.99.3-7.module_el8.8.0+3468+16b86c82
0.0.99.3-7.module_el8.8.0+3468+16b86c82
toolbox-tests
AlmaLinux:8
From an advisory covering 14 CVEs
 before 0.0.99.3-7.module_el8.8.0+3468+16b86c82
0.0.99.3-7.module_el8.8.0+3468+16b86c82
golang
Azure Linux:2
 1.19.0 up to 1.21.6-1
1.21.6-1
azcopy
Azure Linux:2
 before 10.24.0-1
10.24.0-1
containerized-data-importer
Azure Linux:2
 before 1.55.0-20
1.55.0-20
gh
Azure Linux:2
 before 2.13.0-2
2.13.0-2
moby-cli
Azure Linux:2
 before 24.0.9-1
24.0.9-1
prometheus
Azure Linux:2
 before 2.37.9-1
2.37.9-1
sriov-network-device-plugin
Azure Linux:2
 before 3.6.2-2
3.6.2-2
nmi
Azure Linux:2
 before 1.8.17-1
1.8.17-1
golang
Azure Linux:3
 before 1.17.13-2,1.18.8-2,1.21.6-1
1.17.13-2,1.18.8-2,1.21.6-1
moby-engine
Azure Linux:3
 before 25.0.3-1
25.0.3-1
prometheus
Azure Linux:3
 before 2.45.4-1
2.45.4-1
sriov-network-device-plugin
Azure Linux:3
 before 3.7.0-1
3.7.0-1
golang
Azure Linux:2
 before 1.21.6-1
1.21.6-1
golang
Azure Linux:2
 1.18.0 up to 1.21.6-1
1.21.6-1
podman
Azure Linux:2
 through 4.1.1-26 None known
podman
Azure Linux:3
 before 5.6.1-2
5.6.1-2
golang
Azure Linux:3
 through 1.25.7-1 None known
golang
Azure Linux:3
 1.27.0 to 1.27.1-1 None known
golang
Bitnami
 before 1.18.9, 1.19.0 up to 1.19.4
1.18.91.19.4
toolbox
TuxCare:AlmaLinux:9.2
From an advisory covering 9 CVEs
 before 0.0.99.3-10.el9_2.tuxcare.els2
0.0.99.3-10.el9_2.tuxcare.els2
toolbox-tests
TuxCare:AlmaLinux:9.2
From an advisory covering 9 CVEs
 before 0.0.99.3-10.el9_2.tuxcare.els2
0.0.99.3-10.el9_2.tuxcare.els2
golang-1.19
Debian:12
 before 1.19.4-1
1.19.4-1
golang-golang-x-net
Debian:12
 before 1:0.4.0+dfsg-1
1:0.4.0+dfsg-1
golang-golang-x-net
Debian:13
 before 1:0.4.0+dfsg-1
1:0.4.0+dfsg-1
golang-golang-x-net
Debian:14
 before 1:0.4.0+dfsg-1
1:0.4.0+dfsg-1
stdlib
Go
 before 1.18.9, 1.19.0-0 up to 1.19.4
1.18.91.19.4
golang
Mageia:8
 before 1.18.9-1.mga8
1.18.9-1.mga8
golang
openEuler:22.03-LTS-SP1
 before 1.17.3-14.oe2203sp1
1.17.3-14.oe2203sp1
golang
openEuler:20.03-LTS-SP1
 before 1.15.7-23.oe1
1.15.7-23.oe1
golang
openEuler:22.03-LTS
 before 1.17.3-14.oe2203
1.17.3-14.oe2203
golang
openEuler:20.03-LTS-SP3
 before 1.15.7-23.oe1
1.15.7-23.oe1
golang
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-bin
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-misc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-race
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-src
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
golang-tests
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.el9_1
0:1.18.9-1.el9_1
delve
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
delve-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
delve-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
0:1.8.3-1.module+el8.7.0+15126+0e0a42d9
go-toolset
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17845+708ebe87
0:1.18.9-1.module+el8.7.0+17845+708ebe87
golang
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-bin
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-docs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-misc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-race
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-src
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
golang-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.18.9-1.module+el8.7.0+17640+84246675
0:1.18.9-1.module+el8.7.0+17640+84246675
openshift-serverless-clients
Red Hat:serverless:1.0::el8
 before 0:1.6.1-2.el8
0:1.6.1-2.el8
openshift
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
openshift
Red Hat:openshift:4.12::el9
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.12::el9
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
haproxy
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy22
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy22-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
etcd
Red Hat:openstack:16.1::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
etcd-debuginfo
Red Hat:openstack:16.1::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
etcd-debugsource
Red Hat:openstack:16.1::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
etcd
Red Hat:openstack:16.2::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
etcd-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
etcd-debugsource
Red Hat:openstack:16.2::el8
From an advisory covering 12 CVEs
 before 0:3.3.23-12.el8ost
0:3.3.23-12.el8ost
collectd-libpod-stats
Red Hat:openstack:16.1::el8
 before 0:1.0.4-3.el8ost
0:1.0.4-3.el8ost
collectd-libpod-stats
Red Hat:openstack:16.2::el8
 before 0:1.0.4-3.el8ost
0:1.0.4-3.el8ost
buildah
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-tests-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
openshift
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
openshift
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
openshift-clients
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift-clients-redistributable
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
cri-o
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
cri-o-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
cri-o-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
skopeo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
haproxy
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy-debugsource
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy22
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy22-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
podman
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-catatonit
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-debugsource
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-docker
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-gvproxy
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-plugins
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-plugins-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-remote
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-remote-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-tests
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-docker
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-gvproxy
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-plugins
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-plugins-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-remote
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-remote-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
python-werkzeug
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:1.0.1-3.el8ost
0:1.0.1-3.el8ost
python3-werkzeug
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:1.0.1-3.el8ost
0:1.0.1-3.el8ost
python-werkzeug
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 13 CVEs
 before 0:2.0.3-4.el9
0:2.0.3-4.el9
python3-werkzeug
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 13 CVEs
 before 0:2.0.3-4.el9
0:2.0.3-4.el9
microshift
Red Hat:openshift:4.13::el9
From an advisory covering 2 CVEs
 before 0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
microshift-greenboot
Red Hat:openshift:4.13::el9
From an advisory covering 2 CVEs
 before 0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
microshift-networking
Red Hat:openshift:4.13::el9
From an advisory covering 2 CVEs
 before 0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
microshift-release-info
Red Hat:openshift:4.13::el9
From an advisory covering 2 CVEs
 before 0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
microshift-selinux
Red Hat:openshift:4.13::el9
From an advisory covering 2 CVEs
 before 0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
osbuild-composer
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-core
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-core-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-dnf-json
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
osbuild-composer-worker
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:76-2.el9_2
0:76-2.el9_2
criu
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:3.15-3.module+el8.9.0+1445+07728297
0:3.15-3.module+el8.9.0+1445+07728297
libslirp
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:4.4.0-1.module+el8.9.0+1445+07728297
0:4.4.0-1.module+el8.9.0+1445+07728297
cockpit-podman
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:46-1.module+el8.9.0+1445+07728297
0:46-1.module+el8.9.0+1445+07728297
oci-seccomp-bpf-hook
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:1.2.5-2.module+el8.9.0+1445+07728297
0:1.2.5-2.module+el8.9.0+1445+07728297
go1.19
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 2 CVEs
 before 1.19.4-150000.1.18.1
1.19.4-150000.1.18.1
go1.19
SUSE:Linux Enterprise Module for Development Tools 15 SP4
From an advisory covering 2 CVEs
 before 1.19.4-150000.1.18.1
1.19.4-150000.1.18.1
go1.19
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 1.19.4-150000.1.18.1
1.19.4-150000.1.18.1
go1.19
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 1.19.4-150000.1.18.1
1.19.4-150000.1.18.1
go1.18
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 2 CVEs
 before 1.18.9-150000.1.40.1
1.18.9-150000.1.40.1
go1.18
SUSE:Linux Enterprise Module for Development Tools 15 SP4
From an advisory covering 2 CVEs
 before 1.18.9-150000.1.40.1
1.18.9-150000.1.40.1
go1.18
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 1.18.9-150000.1.40.1
1.18.9-150000.1.40.1
go1.18
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 1.18.9-150000.1.40.1
1.18.9-150000.1.40.1
go1.18-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP4
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Enterprise Storage 7.1
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
openSUSE:Leap 15.4
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
openSUSE:Leap 15.5
From an advisory covering 28 CVEs
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-1.13
Ubuntu:Pro:16.04:LTS
 before 1.13.8-1ubuntu1~16.04.3+esm3, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm2
1.13.8-1ubuntu1~16.04.3+esm3
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
golang-1.18
Ubuntu:18.04:LTS
 before 1.18.1-1ubuntu1~18.04.4, plus listed versions
1.18.1-1ubuntu1~18.04.3
1.18.1-1ubuntu1~18.04.4
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
golang-1.13
Ubuntu:Pro:18.04:LTS
 before 1.13.8-1ubuntu1~18.04.4+esm1, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.4
1.13.8-1ubuntu1~18.04.4+esm1
golang-1.16
Ubuntu:Pro:18.04:LTS
 before 1.16.2-0ubuntu1~18.04.2+esm1, plus listed versions
1.16.2-0ubuntu1~18.04.2
1.16.2-0ubuntu1~18.04.2+esm1
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
golang-1.13
Ubuntu:20.04:LTS
 before 1.13.8-1ubuntu1.2, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 4 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.1
1.13.8-1ubuntu1.2
golang-1.16
Ubuntu:20.04:LTS
 before 1.16.2-0ubuntu1~20.04.1, plus listed versions
1.16.2-0ubuntu1~20.04
1.16.2-0ubuntu1~20.04.1
golang-1.18
Ubuntu:20.04:LTS
 before 1.18.1-1ubuntu1~20.04.2, plus listed versions
1.18.1-1ubuntu1~20.04.1
1.18.1-1ubuntu1~20.04.2
golang-1.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1
Show 4 moreShow less
1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2
 None known
golang-1.13
Ubuntu:22.04:LTS
 before 1.13.8-1ubuntu2.22.04.2, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.1
1.13.8-1ubuntu2.22.04.2
golang-1.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3
 None known
golang-1.18
Ubuntu:22.04:LTS
 before 1.18.1-1ubuntu1.1, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu11.18.1-1ubuntu1
1.18.1-1ubuntu1.1
golang-1.18
Ubuntu:18.04:LTS
From an advisory covering 20 CVEs
 before 1.18.1-1ubuntu1~18.04.4, plus listed versions
1.18.1-1ubuntu1~18.04.3
1.18.1-1ubuntu1~18.04.4
golang-1.18
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 1.18.1-1ubuntu1~20.04.2, plus listed versions
1.18.1-1ubuntu1~20.04.1
1.18.1-1ubuntu1~20.04.2
golang-1.18
Ubuntu:22.04:LTS
From an advisory covering 20 CVEs
 before 1.18.1-1ubuntu1.1, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu11.18.1-1ubuntu1
1.18.1-1ubuntu1.1
golang-1.13
Ubuntu:Pro:16.04:LTS
From an advisory covering 18 CVEs
 before 1.13.8-1ubuntu1~16.04.3+esm3, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm2
1.13.8-1ubuntu1~16.04.3+esm3
golang-1.13
Ubuntu:Pro:18.04:LTS
From an advisory covering 18 CVEs
 before 1.13.8-1ubuntu1~18.04.4+esm1, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.4
1.13.8-1ubuntu1~18.04.4+esm1
golang-1.16
Ubuntu:Pro:18.04:LTS
From an advisory covering 18 CVEs
 before 1.16.2-0ubuntu1~18.04.2+esm1, plus listed versions
1.16.2-0ubuntu1~18.04.2
1.16.2-0ubuntu1~18.04.2+esm1
golang-1.13
Ubuntu:20.04:LTS
From an advisory covering 18 CVEs
 before 1.13.8-1ubuntu1.2, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 4 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.1
1.13.8-1ubuntu1.2
golang-1.16
Ubuntu:20.04:LTS
From an advisory covering 18 CVEs
 before 1.16.2-0ubuntu1~20.04.1, plus listed versions
1.16.2-0ubuntu1~20.04
1.16.2-0ubuntu1~20.04.1
golang-1.13
Ubuntu:22.04:LTS
From an advisory covering 18 CVEs
 before 1.13.8-1ubuntu2.22.04.2, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.1
1.13.8-1ubuntu2.22.04.2
go1.18
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.18.9-1.1
1.18.9-1.1
go1.19
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.19.4-1.1
1.19.4-1.1
traefik
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.9.6-1.1
2.9.6-1.1
velero
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.11.1-1.1
1.11.1-1.1
traefik2
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 2.11.5-1.1
2.11.5-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubdomdom82/h2conn-exploit2022-12-13

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-41717 is a medium vulnerability (CVSS 5.3) in Go Standard Library Net/http, published December 8, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.08%, the 93rd percentile. Fixed in golang.org/x/net/http2 0.4.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 472 package rows and 894 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 37 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open