CVE Vulnerabilities

CVE-2022-27191

Published: Mar 18, 2022 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

Affected Software

Name Vendor Start Version End Version
Ssh Golang * 0.0.0-20220314234659-1baeb1ce4c0b (excluding)
OADP-1.1-RHEL-8 RedHat oadp/oadp-velero-rhel8:1.1.1-20 *
Openshift Serverless 1 on RHEL 8 RedHat openshift-serverless-clients-0:1.5.0-3.el8 *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-grafana-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-must-gather-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-operator-bundle-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat application-ui-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat assisted-image-service-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cert-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cluster-backup-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat clusterclaims-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cluster-curator-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat clusterlifecycle-state-metrics-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cluster-proxy-addon-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat config-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat console-api-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat console-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat discovery-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat endpoint-monitoring-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-propagator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-spec-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-status-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-template-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat grafana-dashboard-loader-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat grc-ui-api-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat grc-ui-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat iam-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat insights-client-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat insights-metrics-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat klusterlet-addon-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat klusterlet-addon-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat kube-rbac-proxy-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat kube-state-metrics-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat managedcluster-import-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat management-ingress-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat memcached-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat memcached-exporter-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat metrics-collector-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicloud-integrations-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicloud-manager-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multiclusterhub-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multiclusterhub-repo-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-observability-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-application-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-channel-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-deployable-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-placementrule-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-subscription-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-subscription-release-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat node-exporter-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat observatorium-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat observatorium-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat openshift-hive-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat placement-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat prometheus-alertmanager-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat prometheus-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat provider-credential-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rbac-query-proxy-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat redisgraph-tls-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat registration-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat registration-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rhacm-agent-service-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rhacm-assisted-installer-agent-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rhacm-assisted-installer-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rhacm-assisted-installer-reporter-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-aggregator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-api-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-collector-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-ui-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat submariner-addon-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat thanos-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat thanos-receive-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-rclone-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-restic-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-rsync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat work-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-cluster-proxy-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-governance-policy-addon-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-grafana-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-must-gather-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-operator-bundle-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-prometheus-config-reloader-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-prometheus-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat acm-volsync-addon-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cert-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cluster-backup-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat cluster-proxy-addon-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat config-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat console-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat endpoint-monitoring-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-propagator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-spec-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-status-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat governance-policy-template-sync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat grafana-dashboard-loader-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat iam-policy-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat insights-client-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat insights-metrics-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat klusterlet-addon-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat klusterlet-addon-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat kube-rbac-proxy-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat kube-state-metrics-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat management-ingress-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat memcached-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat memcached-exporter-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat metrics-collector-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicloud-integrations-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multiclusterhub-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multiclusterhub-repo-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-observability-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-application-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-channel-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat multicluster-operators-subscription-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat node-exporter-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat observatorium-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat observatorium-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat prometheus-alertmanager-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat prometheus-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat rbac-query-proxy-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat redisgraph-tls-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-aggregator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-api-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-collector-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat search-operator-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat submariner-addon-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat thanos-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat thanos-receive-controller-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-rclone-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-restic-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-rsync-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-mover-syncthing-container *
Red Hat Advanced Cluster Management for Kubernetes 2 RedHat volsync-operator-bundle-container *
Red Hat Enterprise Linux 8 RedHat container-tools:rhel8-8070020220929222448.39077419 *
Red Hat Enterprise Linux 8 RedHat container-tools:4.0-8070020220830101436.39077419 *
Red Hat Enterprise Linux 9 RedHat podman-2:4.2.0-3.el9 *
Red Hat Enterprise Linux 9 RedHat buildah-1:1.27.0-2.el9 *
Red Hat OpenShift Container Platform 4.11 RedHat cri-o-0:1.24.1-11.rhaos4.11.gitb0d2ef3.el8 *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-aws-ebs-csi-driver-rhel8:v4.11.0-202208020235.p0.g7564046.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-azure-disk-csi-driver-rhel8:v4.11.0-202208020235.p0.g0fe424e.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-azure-file-csi-driver-rhel8:v4.11.0-202208020235.p0.g67c3831.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-csi-driver-manila-rhel8:v4.11.0-202208020235.p0.g246ae15.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-csi-driver-nfs-rhel8:v4.11.0-202208020235.p0.gf144bb4.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-machine-api-provider-azure-rhel8:v4.11.0-202208020706.p0.g93b3f9e.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-openstack-cinder-csi-driver-rhel8:v4.11.0-202208020235.p0.g246ae15.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-openstack-cloud-controller-manager-rhel8:v4.11.0-202208020235.p0.g246ae15.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-vmware-vsphere-csi-driver-rhel8:v4.11.0-202208020235.p0.gd4721ba.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-vsphere-csi-driver-rhel8:v4.11.0-202208020235.p0.gd4721ba.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-installer:v4.11.0-202212070956.p0.g7e60d78.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-baremetal-installer-rhel8:v4.11.0-202212202214.p0.gd3fb15a.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4/ose-installer-artifacts:v4.11.0-202212202214.p0.gd3fb15a.assembly.stream *
Red Hat OpenShift Container Platform 4.11 RedHat openshift4-wincw/windows-machine-config-rhel8-operator:6.0.1-38 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-node-feature-discovery:v4.12.0-202301042354.p0.g5e2696b.assembly.stream *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4-wincw/windows-machine-config-rhel8-operator:7.0.0-22 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift-clients-0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-installer:v4.13.0-202305091542.p0.g44db7b2.assembly.stream *
Red Hat OpenShift Container Platform 4.13 RedHat openshift-clients-0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el9 *
RHACS-4.1-RHEL-8 RedHat advanced-cluster-security/rhacs-main-rhel8:4.1.0-13 *
RHEL-7-CNV-4.11 RedHat kubevirt-0:4.11.0-643.el7 *
RHEL-8-CNV-4.11 RedHat container-native-virtualization/libguestfs-tools:v4.11.0-106 *
RHEL-8-CNV-4.11 RedHat container-native-virtualization/virt-launcher:v4.11.0-106 *
RHEL-8-CNV-4.11 RedHat kubevirt-0:4.11.0-643.el8 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/client-kn-rhel8:1.5.0-3 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-controller-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-receiver-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-mtping-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/eventing-webhook-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/func-utils-rhel8:1.26.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/ingress-rhel8-operator:1.26.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/knative-rhel8-operator:1.26.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:1.5.0-4 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/kourier-control-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/net-istio-controller-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/net-istio-webhook-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serverless-operator-bundle:1.26.0-5 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serverless-rhel8-operator:1.26.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-activator-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-controller-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-domain-mapping-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-domain-mapping-webhook-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-queue-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/serving-webhook-rhel8:1.5.0-2 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.26.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8:1.5.0-1 *
RHOSS-1.26-RHEL-8 RedHat openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8:1.26.0-5 *
Golang-go.crypto Ubuntu bionic *
Golang-go.crypto Ubuntu impish *
Golang-go.crypto Ubuntu kinetic *
Golang-go.crypto Ubuntu lunar *
Golang-go.crypto Ubuntu mantic *
Golang-go.crypto Ubuntu xenial *
Lxd Ubuntu xenial *
Snapd Ubuntu trusty *
Snapd Ubuntu xenial *

References