CVE-2022-30635

{"containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2023-06-12T19:04:46.476Z"}, "title": "Stack exhaustion when decoding certain messages in encoding/gob", "descriptions": [{"lang": "en", "value": "Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures."}], "affected": [{"vendor": "Go standard library", "product": "encoding/gob", "collectionURL": "https://pkg.go.dev", "packageName": "encoding/gob", "versions": [{"version": "0", "lessThan": "1.17.12", "status": "affected", "versionType": "semver"}, {"version": "1.18.0-0", "lessThan": "1.18.4", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "Decoder.decIgnoreOpFor"}, {"name": "Decoder.compileIgnoreSingle"}, {"name": "Decoder.compileDec"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-674: Uncontrolled Recursion"}]}], "references": [{"url": "https://go.dev/cl/417064"}, {"url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7"}, {"url": "https://go.dev/issue/53615"}, {"url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE"}, {"url": "https://pkg.go.dev/vuln/GO-2022-0526"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T06:56:13.235Z"}, "title": "CVE Program Container", "references": [{"url": "https://go.dev/cl/417064", "tags": ["x_transferred"]}, {"url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7", "tags": ["x_transferred"]}, {"url": "https://go.dev/issue/53615", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2022-0526", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-674", "lang": "en", "description": "CWE-674 Uncontrolled Recursion"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T17:44:14.218881Z", "id": "CVE-2022-30635", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T17:44:24.600Z"}}]}, "cveMetadata": {"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "assignerShortName": "Go", "cveId": "CVE-2022-30635", "datePublished": "2022-08-09T20:16:05.000Z", "dateReserved": "2022-05-12T00:00:00.000Z", "dateUpdated": "2026-03-06T17:44:24.600Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://go.dev/cl/417064", "tags": ["x_transferred"]}, {"url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7", "tags": ["x_transferred"]}, {"url": "https://go.dev/issue/53615", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2022-0526", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T06:56:13.235Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-30635", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-06T17:44:14.218881Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-674", "description": "CWE-674 Uncontrolled Recursion"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T17:43:54.585Z"}}], "cna": {"title": "Stack exhaustion when decoding certain messages in encoding/gob", "affected": [{"vendor": "Go standard library", "product": "encoding/gob", "versions": [{"status": "affected", "version": "0", "lessThan": "1.17.12", "versionType": "semver"}, {"status": "affected", "version": "1.18.0-0", "lessThan": "1.18.4", "versionType": "semver"}], "packageName": "encoding/gob", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "programRoutines": [{"name": "Decoder.decIgnoreOpFor"}, {"name": "Decoder.compileIgnoreSingle"}, {"name": "Decoder.compileDec"}]}], "references": [{"url": "https://go.dev/cl/417064"}, {"url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7"}, {"url": "https://go.dev/issue/53615"}, {"url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE"}, {"url": "https://pkg.go.dev/vuln/GO-2022-0526"}], "descriptions": [{"lang": "en", "value": "Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-674: Uncontrolled Recursion"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2023-06-12T19:04:46.476Z"}}}, "cveMetadata": {"cveId": "CVE-2022-30635", "state": "PUBLISHED", "dateUpdated": "2026-03-06T17:44:24.600Z", "dateReserved": "2022-05-12T00:00:00.000Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2022-08-09T20:16:05.000Z", "assignerShortName": "Go"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "packageName": "encoding/gob", "product": "encoding/gob", "programRoutines": [{"name": "Decoder.decIgnoreOpFor"}, {"name": "Decoder.compileIgnoreSingle"}, {"name": "Decoder.compileDec"}], "vendor": "Go standard library", "versions": [{"lessThan": "1.17.12", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "1.18.4", "status": "affected", "version": "1.18.0-0", "versionType": "semver"}]}], "source": "security@golang.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "646881F6-A299-4D92-A1F3-E95959FA426F", "versionEndExcluding": "1.17.12", "vulnerable": true}, {"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "FE088A2D-7894-4A48-887C-36DD727A7BEB", "versionEndExcluding": "1.18.4", "versionStartIncluding": "1.18.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures."}, {"lang": "es", "value": "Una recursi\u00f3n no controlada en el archivo Decoder.Decode en encoding/gob versiones anteriores a Go 1.17.12 y Go 1.18.4, permite a un atacante causar un p\u00e1nico debido al agotamiento de la pila por medio de un mensaje que contiene estructuras profundamente anidadas"}], "id": "CVE-2022-30635", "lastModified": "2026-06-17T04:43:59.430", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-30635", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T17:44:14.218881Z", "version": "2.0.3"}}]}, "published": "2022-08-10T20:15:42.640", "references": [{"source": "security@golang.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://go.dev/cl/417064"}, {"source": "security@golang.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://go.dev/issue/53615"}, {"source": "security@golang.org", "tags": ["Mailing List", "Patch", "Vendor Advisory"], "url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7"}, {"source": "security@golang.org", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE"}, {"source": "security@golang.org", "tags": ["Vendor Advisory"], "url": "https://pkg.go.dev/vuln/GO-2022-0526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://go.dev/cl/417064"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://go.dev/issue/53615"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Vendor Advisory"], "url": "https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://pkg.go.dev/vuln/GO-2022-0526"}], "sourceIdentifier": "security@golang.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-674"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-agent-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-apiserver-network-proxy-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-image-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-reporter-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-aws-encryption-provider-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-aws-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-azure-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-kubevirt-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-clusterclaims-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-curator-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-clusterlifecycle-state-metrics-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-proxy-addon-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-proxy-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-console-mce-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-discovery-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hive-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-addon-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-deployment-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-klusterlet-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-managedcluster-import-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-managed-serviceaccount-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-multicloud-manager-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-must-gather-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-placement-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-provider-credential-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-registration-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-registration-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6345", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-work-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:8634", "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.1::el8", "package": "oadp/oadp-velero-rhel8:1.1.1-20", "product_name": "OADP-1.1-RHEL-8", "release_date": "2022-11-28T00:00:00Z"}, {"advisory": "RHSA-2023:1042", "cpe": "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8", "impact": "low", "package": "custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8:2.8.2-143", "product_name": "OpenShift Custom Metrics Autoscaler 2", "release_date": "2023-03-06T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/client-kn-rhel8:1.3.1-4", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-controller-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-mtping-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-storage-version-migration-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-sugar-controller-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/eventing-webhook-rhel8:1.3.2-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/ingress-rhel8-operator:1.24.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/knative-rhel8-operator:1.24.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/kn-cli-artifacts-rhel8:1.3.1-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/kourier-control-rhel8:1.3.0-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/net-istio-controller-rhel8:1.3.0-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/net-istio-webhook-rhel8:1.3.0-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serverless-operator-bundle:1.24.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serverless-rhel8-operator:1.24.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-activator-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-autoscaler-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-controller-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-domain-mapping-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-queue-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-storage-version-migration-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/serving-webhook-rhel8:1.3.0-3", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1/svls-must-gather-rhel8:1.24.0-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6040", "cpe": "cpe:/a:redhat:serverless:1.24::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8:1.3.2-2", "product_name": "Openshift Serveless 1.24", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6042", "cpe": "cpe:/a:redhat:serverless:1.0::el8", "package": "openshift-serverless-clients-0:1.3.1-4.el8", "product_name": "Openshift Serverless 1 on RHEL 8", "release_date": "2022-08-10T00:00:00Z"}, {"advisory": "RHSA-2022:6152", "cpe": "cpe:/a:redhat:openshift_secondary_scheduler:1.1::el8", "package": "openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8:v1.1-11", "product_name": "OSSO-1.1-RHEL-8", "release_date": "2022-09-01T00:00:00Z"}, {"advisory": "RHSA-2022:6348", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "gatekeeper-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6348", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "gatekeeper-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6348", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "gatekeeper-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "lighthouse-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "lighthouse-coredns-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "nettest-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "subctl-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-gateway-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-globalnet-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-networkplugin-syncer-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6346", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-route-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-mover-rclone-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-mover-restic-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-mover-rsync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-mover-syncthing-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6347", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "volsync-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-governance-policy-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-grafana-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-must-gather-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-prometheus-config-reloader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-prometheus-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-volsync-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "cert-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "cluster-backup-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "config-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "console-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "endpoint-monitoring-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-propagator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-spec-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-status-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-template-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "grafana-dashboard-loader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "iam-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "insights-client-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "insights-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "klusterlet-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "kube-rbac-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "kube-state-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "management-ingress-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "memcached-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "memcached-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "metrics-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicloud-integrations-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multiclusterhub-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multiclusterhub-repo-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-observability-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-application-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-channel-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-subscription-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "node-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "observatorium-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "observatorium-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "prometheus-alertmanager-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "prometheus-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "rbac-query-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "redisgraph-tls-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-aggregator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "thanos-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2022:6370", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "thanos-receive-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-06T00:00:00Z"}, {"advisory": "RHSA-2023:3642", "cpe": "cpe:/a:redhat:ceph_storage:6.1::el9", "package": "rhceph/rhceph-6-dashboard-rhel9:6-75", "product_name": "Red Hat Ceph Storage 6.1", "release_date": "2023-06-15T00:00:00Z"}, {"advisory": "RHSA-2022:5866", "cpe": "cpe:/a:redhat:devtools:2022", "package": "go-toolset-1.17-golang-0:1.17.12-1.el7_9", "product_name": "Red Hat Developer Tools", "release_date": "2022-08-02T00:00:00Z"}, {"advisory": "RHSA-2022:5775", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "go-toolset:rhel8-8060020220720230014.97d7f71f", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2022-08-01T00:00:00Z"}, {"advisory": "RHSA-2022:7129", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "git-lfs-0:2.13.3-3.el8_6", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2022-10-25T00:00:00Z"}, {"advisory": "RHSA-2022:7519", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "grafana-0:7.5.15-3.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2022-11-08T00:00:00Z"}, {"advisory": "RHSA-2022:7648", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "grafana-pcp-0:3.2.0-2.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2022-11-08T00:00:00Z"}, {"advisory": "RHSA-2023:2758", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "container-tools:rhel8-8080020230321153727.0f77c1b7", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-05-16T00:00:00Z"}, {"advisory": "RHSA-2023:2802", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "container-tools:4.0-8080020230217080101.8108cfbc", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-05-16T00:00:00Z"}, {"advisory": "RHSA-2022:5799", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "golang-0:1.17.12-1.el9_0", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-08-01T00:00:00Z"}, {"advisory": "RHSA-2022:8057", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "grafana-0:7.5.15-3.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-11-15T00:00:00Z"}, {"advisory": "RHSA-2022:8250", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "grafana-pcp-0:3.2.0-3.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-11-15T00:00:00Z"}, {"advisory": "RHSA-2023:2357", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "git-lfs-0:3.2.0-1.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-05-09T00:00:00Z"}, {"advisory": "RHSA-2022:9047", "cpe": "cpe:/a:redhat:rhmt:1.7::el8", "package": "rhmtc/openshift-velero-plugin-rhel8:v1.7.6-5", "product_name": "Red Hat Migration Toolkit for Containers 1.7", "release_date": "2022-12-15T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/istio-cni-rhel8:2.2.2-7", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/istio-rhel8-operator:2.2.2-8", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/pilot-rhel8:2.2.2-7", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/prometheus-rhel8:2.2.2-4", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/proxyv2-rhel8:2.2.2-8", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2022:6283", "cpe": "cpe:/a:redhat:service_mesh:2.2::el8", "package": "openshift-service-mesh/ratelimit-rhel8:2.2.2-4", "product_name": "Red Hat OpenShift Service Mesh 2.2 for RHEL 8", "release_date": "2022-08-31T00:00:00Z"}, {"advisory": "RHSA-2023:1275", "cpe": "cpe:/a:redhat:openstack:16.1::el8", "package": "etcd-0:3.3.23-12.el8ost", "product_name": "Red Hat OpenStack Platform 16.1", "release_date": "2023-03-15T00:00:00Z"}, {"advisory": "RHSA-2023:1275", "cpe": "cpe:/a:redhat:openstack:16.2::el8", "package": "etcd-0:3.3.23-12.el8ost", "product_name": "Red Hat OpenStack Platform 16.2", "release_date": "2023-03-15T00:00:00Z"}, {"advisory": "RHSA-2023:0407", "cpe": "cpe:/a:redhat:container_native_virtualization:4.12::el7", "package": "kubevirt-0:4.12.0-1057.el7", "product_name": "RHEL-7-CNV-4.12", "release_date": "2023-01-24T00:00:00Z"}, {"advisory": "RHSA-2023:0407", "cpe": "cpe:/a:redhat:container_native_virtualization:4.12::el8", "package": "kubevirt-0:4.12.0-1057.el8", "product_name": "RHEL-8-CNV-4.12", "release_date": "2023-01-24T00:00:00Z"}, {"advisory": "RHSA-2023:0408", "cpe": "cpe:/a:redhat:container_native_virtualization:4.12::el8", "package": "container-native-virtualization/virt-api:v4.12.0-255", "product_name": "RHEL-8-CNV-4.12", "release_date": "2023-01-25T00:00:00Z"}, {"advisory": "RHSA-2023:3742", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.13::el9", "package": "odf4/mcg-rhel9-operator:v4.13.0-41", "product_name": "RHODF-4.13-RHEL-9", "release_date": "2023-06-21T00:00:00Z"}], "bugzilla": {"description": "golang: encoding/gob: stack exhaustion in Decoder.Decode", "id": "2107388", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107388"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-1325", "details": ["Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.", "A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability."], "name": "CVE-2022-30635", "package_state": [{"cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2", "fix_state": "Affected", "package_name": "migration-toolkit-virtualization/mtv-controller-rhel9", "product_name": "Migration Toolkit for Virtualization"}, {"cpe": "cpe:/a:redhat:ocp_tools", "fix_state": "Affected", "package_name": "odo", "product_name": "OpenShift Developer Tools and Services"}, {"cpe": "cpe:/a:redhat:openshift_pipelines:1", "fix_state": "Affected", "package_name": "openshift-pipelines-client", "product_name": "OpenShift Pipelines"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/gatekeeper-rhel8-operator", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/subctl-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/work-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "volsync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:advanced_cluster_security:3", "fix_state": "Affected", "package_name": "advanced-cluster-security/rhacs-main-rhel8", "product_name": "Red Hat Advanced Cluster Security 3"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Affected", "package_name": "openshift-clients", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "golang", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:5", "fix_state": "Affected", "package_name": "rhceph/rhceph-5-dashboard-rhel8", "product_name": "Red Hat Ceph Storage 5"}, {"cpe": "cpe:/a:redhat:devtools:", "fix_state": "Affected", "package_name": "go-toolset-1.18-golang", "product_name": "Red Hat Developer Tools"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "container-tools:3.0/containernetworking-plugins", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "osbuild-composer", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "containernetworking-plugins", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "go-toolset", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "osbuild-composer", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift-golang-builder-container", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "mcg", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/cephcsi-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_distributed_tracing:2", "fix_state": "Not affected", "package_name": "rhosdt/jaeger-agent-rhel8", "product_name": "Red Hat OpenShift distributed tracing 2"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/gitops-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-kam", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Will not fix", "package_name": "rhosp-rhel8-tech-preview/osp-director-operator", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/clair-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-git227-git-lfs", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "go-toolset-7-golang", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Out of support scope", "package_name": "heketi", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:webterminal:1", "fix_state": "Affected", "package_name": "web-terminal-exec-container", "product_name": "Red Hat Web Terminal"}], "public_date": "2022-07-12T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-30635\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-30635\nhttps://go.dev/issue/53615\nhttps://groups.google.com/g/golang-announce/c/nqrv9fbR0zE"], "statement": "OpenShift Container Platform (OCP) starting from 4.10 stream is already compiled in the patched version of Go, hence is not affected by this vulnerability.The vulnerability has been rated as moderate instead of high because the vulnerability can only result in a minor denial of service.\nWithin regulated environments, a combination of the following controls acts as a significant barrier to successfully exploiting a CWE-1325: Improperly Controlled Sequential Memory Allocation vulnerability and therefore downgrades the severity of this particular CVE from Moderate to Low.\nAccess to the platform is granted only after successful hard token-based multi-factor authentication (MFA) and is governed by least privilege to ensure only authorized users and roles can execute or modify code. Static code analysis and peer reviews enforce strong input validation and error handling, preventing improperly validated inputs from causing system instability, data exposure, or privilege escalation. In the event of successful exploitation, process isolation limits the impact of excessive sequential memory allocation by restricting memory use per process, preventing any single process from exhausting system resources. Finally, the platform uses memory protection mechanisms such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) to reduce the risk of memory allocation-based attacks.", "threat_severity": "Moderate"}

{}