Input validation error in client_golang - CVE-2022-21698

 

Input validation error in client_golang - CVE-2022-21698

Published: March 24, 2022 / Updated: June 1, 2022


Vulnerability identifier: #VU61599
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2022-21698
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Affected software:
client_golang
Oracle Linux
SUSE Liberty Linux 9.6
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Liberty Linux 7
SUSE Liberty LTSS 7 for Oracle
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Module for SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Liberty Linux
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Fedora
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Tools
SUSE Manager Client Tools for SLE
SUSE Manager Client Tools Beta for SLE
SUSE Multi-Linux Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Containers
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
openSUSE Leap
IBM Cloud Pak for Watson AIOps
DB2 Data Management Console
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
ObjectScale
Storage Defender – Data Protect
IBM Watson Machine Learning Accelerator
Storage Ceph
IBM supplied MQ Advanced container images
openshift-serverless-clients (Red Hat package)
etcd (Red Hat package)
kubevirt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
golang-github-snappy
terrier
gitjacker
golang-github-xordataexchange-crypt
golang-jaytaylor-html2text
golang-github-multiformats-multibase
golang-github-fvbommel-util
golang-github-etcd-io-gofail
golang-github-twpayne-waypoint
golang-github-sophaskins-efs2tar
golang-github-pkg-diff
golang-github-rubenv-sql-migrate
golang-github-facebookincubator-dhcplb
golang-github-facebookincubator-contest
golang-github-olekukonko-tablewriter
golang-github-dustinkirkland-petname
golang-github-aryann-difflib
golang-github-golangci-lint-1
golang-github-mdlayher-ethernet
netscanner
hakrevdns
golang-github-mattermost-xml-roundtrip-validator
golang-github-facebookincubator-ntp
goloris
golang-github-bobesa-domain-util
ohmybackup
asnip
hulk
aron
golang-github-christrenkamp-goxpath
mass3
httpdump
golang-github-shellcode33-vm-detection
golang-github-cockroachdb-pebble
golang-github-xo-terminfo
xq
golang-github-vincent-petithory-dataurl
sysutil
goaltdns
snowcrash
golang-github-projectdiscovery-mapcidr
golang-github-crossdock
golang-github-client9-plaintext
golang-github-mdlayher-dhcp6
toolbox (Red Hat package)
golang-github-leveldb
golang-github-rwcarlsen-goexif
golang-github-bifurcation-mint
golang-github-fernet
golang-github-pquerna-ffjson
golang-gitlab-commonmark-linkify
golang-sourcegraph-appdash
golang-github-cloudflare-redoctober
golang-github-krishicks-yaml-patch
golang-github-gohugoio-testmodbuilder
golang-github-sourcegraph-syntaxhighlight
golang-vbom-util
golang-github-google-slothfs
golang-github-shurcool-vfsgen
wgctrl
golang-github-ajstarks-deck
golang-github-axgle-mahonia
golang-github-mgutz-ansi
golang-x-debug
golang-github-burntsushi-xgb
golang-x-perf
golang-github-a8m-tree
golang-github-eknkc-amber
golang-k8s-kube-openapi
golang-x-build
golang-github-gucumber
golang-github-rcrowley-metrics
golang-storj-drpc
golang-x-exp
toolbox-tests
toolbox
golang-github-multiformats-multihash
golang-github-martinhoefling-goxkcdpwgen
golang-github-u-root-iscsinl
assetfinder
golang-github-hashicorp-consul-migrate
golang-github-cpu-goacmedns
golang-github-appc-goaci
httprobe
commit-stream
golang-contrib-opencensus-resource
golang-github-facebookincubator-nvdtools
python-ifaddr (Red Hat package)
golang-github-dreamacro-shadowsocks2
golang-github-rakyll-statik
python-wcwidth (Red Hat package)
golang-github-mattn-colorable
golang-github-nbutton23-zxcvbn
golang-x-tools
python-iso8601 (Red Hat package)
mgrctl-bash-completion
mgrctl-zsh-completion
mgrctl-debuginfo
mgrctl
scap-security-guide-redhat
firewalld-prometheus-config
kiwi-desc-saltboot
golang-github-projectdiscovery-chaos-client
kiln
golang-github-nats-io-nkeys
golang-github-kr-text
golang-github-chris-ramon-douceur
golang-github-intel-goresctrl
golang-github-burntsushi-toml-test
douceur
podman-tui
golang-github-containerd-continuity
python-zake (Red Hat package)
mqttcli
golang-github-tklauser-numcpus
udica
meg
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
golang-github-c-bata-prompt
shhgit
onionscan
yggdrasil
golang-github-skip2-qrcode
python-oslo-metrics (Red Hat package)
golang-github-liamg-tml
webanalyze
golang-github-oklog
python-logutils (Red Hat package)
golang-ariga-atlas
golang-x-text
prometheus-formula
golang-github-pdfcpu
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debugsource
golang-github-QubitProducts-exporter_exporter-debuginfo
golang-github-jmespath
golang-github-google-wire
golang-github-jsonnet-bundler
python-colorama (Red Hat package)
golang-github-envoyproxy-protoc-gen-validate
golang-github-spyzhov-ajson
golang-github-mvo5-uboot
python-greenlet (Red Hat package)
golang-github-mrunalp-fileutils
python-zipp (Red Hat package)
python-tempita (Red Hat package)
golang-github-googleapis-gnostic
golang-github-quay-claircore
asciigraph
golang-github-ulikunitz-xz
golang-x-mod
golang-github-redteampentesting-monsoon
python-defusedxml
python-msgpack (Red Hat package)
golang-github-gobuffalo-here
golang-github-ledisdb
godoctor
golang-github-chromedp
golang-github-insomniacslk-termhook
golang-github-theupdateframework-notary
golang-github-lusitaniae-apache_exporter-debuginfo
golang-github-lusitaniae-apache_exporter
python-prometheus_client (Red Hat package)
golang-github-mailru-easyjson
jid
python-repoze-lru (Red Hat package)
golang-github-cilium-ebpf
duf
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
golang-github-quay-goval-parser
golang-github-appc-spec
golang-gioui
golang-github-moby-buildkit
containernetworking-plugins
python3-firewall
firewalld-lang
firewall-applet
firewall-config
firewall-macros
firewalld
golang-github-hashicorp-serf
prometheus-exporters-formula
prometheus-postgres_exporter
golang-github-alecthomas-chroma
aerc
golang-github-prometheus-tsdb
golang-github-containerd-stargz-snapshotter
python-pint (Red Hat package)
golist
prometheus-postgres_exporter-debuginfo
stargz-snapshotter
golang-github-akavel-rsrc
python-wsme (Red Hat package)
golang-github-cucumber-godog
python-scciclient (Red Hat package)
golang-github-vbatts-tar-split
python-voluptuous (Red Hat package)
golang-github-liamg-scout
gojq
python-migrate (Red Hat package)
golang-github-prometheus-promu
glide
golang-github-theoapp-theo-agent
python-fasteners (Red Hat package)
golang-github-evanw-esbuild
butane (Red Hat package)
butane
coreos-installer (Red Hat package)
htmltest
golang-github-emersion-smtp
golang-github-hashicorp-hclog
golang-github-instrumenta-kubeval
python-pyrsistent (Red Hat package)
reg
golang-x-lint
golang-github-google-pprof
golang-github-cloudflare
golang-github-google-jsonnet
golang-github-markbates-pkger
golang-github-appc-docker2aci
crun
prometheus-blackbox_exporter-debuginfo
prometheus-blackbox_exporter
golang-github-nats-io-streaming-server
console-login-helper-messages (Red Hat package)
golang-github-prometheus-alertmanager
tinygo
golang-github-yuin-gopher-lua
golang-github-vmware-govmomi
python-zeroconf (Red Hat package)
subscription-matcher
python-hardware (Red Hat package)
fzf
open-policy-agent
cadvisor
python-openstacksdk (Red Hat package)
system-user-grafana
system-user-prometheus
golang-github-gorhill-cronexpr
golang-github-pierrre-geohash
golang-github-morikuni-aec
golang-github-burntsushi-toml
age
golang-github-cheekybits-genny
golang-github-hpcloud-tail
runc
golang-github-gohugoio-localescompressed
golang-github-j-keck-arping
golang-modernc-golex
containernetworking-plugins (Red Hat package)
golang-github-elazarl-bindata-assetfs
aardvark-dns
netavark
golang-github-facebookincubator-go2chef
golang-github-geertjohan-rice
golang-github-chai2010-gettext
ffuf
golang-github-phayes-freeport
golang-github-containerd-fuse-overlayfs-snapshotter
golang-github-hashicorp-sockaddr
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
manifest-tool
golang-github-segmentio-ksuid
python-editor (Red Hat package)
golang-gopkg-neurosnap-sentences-1
golang-github-coredns-corefile-migration
libsodium (Red Hat package)
golang-github-microcosm-cc-bluemonday
dnsx
golang-github-gobwas-ws
3mux
python-flask (Red Hat package)
golang-github-containernetworking-cni
golang-github-temoto-robotstxt
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
golang-github-tinylib-msgp
slirp4netns (Red Hat package)
slirp4netns
golang-github-hexdigest-gowrap
golang-github-uber-athenadriver
oci-seccomp-bpf-hook
python-rfc3986 (Red Hat package)
golang-github-andybalholm-cascadia
supportutils-plugin-salt
golang-github-posener-complete
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
skopeo
skopeo-tests
containers-common
golang-github-oneofone-xxhash
golang-github-francoispqt-gojay
golang-github-prometheus-node_exporter
golang-github-a8m-envsubst
python-vine (Red Hat package)
golang-github-hashicorp-memdb
python-pynacl (Red Hat package)
golang-github-prometheus-prom2json
source-to-image
golang-github-prometheus-node-exporter
golang-github-gogo-protobuf
python-pecan (Red Hat package)
python-warlock (Red Hat package)
golang-bug-serial-1
git-time-metric
golang-etcd-bbolt
python-requestsexceptions (Red Hat package)
fuse-overlayfs
golang-github-spf13-cobra
godotenv
golang-github-gdamore-tcell
python-appdirs (Red Hat package)
golang-github-gogo-googleapis
golang-github-dave-jennifer
gotags
crun (Red Hat package)
python-alembic (Red Hat package)
golang-github-mock
golang-mongodb-mongo-driver
golang-github-nxadm-tail
python-oslo-upgradecheck (Red Hat package)
golang-github-leonelquinteros-gotext
shellz
golang-github-pact-foundation
skopeo (Red Hat package)
nebula
golang-github-maruel-panicparse
act
golang-github-niklasfasching-org
python-pyperclip (Red Hat package)
golang-github-boynux-squid_exporter
clash
containerd
golang-google-appengine
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
aquatone
chisel
golang-github-aliyun-ossutil
golang-github-rogpeppe-internal
golang-github-deepmap-oapi-codegen
python-webob (Red Hat package)
grpcurl
fuse-overlayfs (Red Hat package)
node-exporter
golang-github-pelletier-toml
golang-github-goccy-yaml
golang-github-prometheus-node_exporter-debuginfo
python-pycdlib (Red Hat package)
golang-github-magefile-mage
gopass-jsonapi
python-wrapt (Red Hat package)
gopass-hibp
golang-github-prometheus-client
golang-github-boynux-squid_exporter-debuginfo
gopass
python-six (Red Hat package)
vultr
golang-github-valyala-fasthttp
golang-github-googlecloudplatform-cloudsql-proxy
buildah
buildah-tests
syncthing
containers-common (Red Hat package)
powerline-go
golang-k8s-sample-cli-plugin
golang-k8s-pod-security-admission
golang-k8s-sample-controller
golang-k8s-code-generator
golang-k8s-kube-aggregator
golang-k8s-sample-apiserver
golang-k8s-apiextensions-apiserver
buildah (Red Hat package)
golang-github-aws-lambda
kubernetes
cri-o (Red Hat package)
cri-tools (Red Hat package)
golang-google-protobuf
golang-github-shopify-sarama
hcloud
python-memcached (Red Hat package)
rclone
golang-github-pelletier-toml-2
python-waitress (Red Hat package)
golang-github-posener-complete-2
python-paste-deploy (Red Hat package)
golang-github-cpuguy83-md2man
golang-github-jamesclonk-vultr
golang-github-oklog-ulid
python-werkzeug (Red Hat package)
micro
conmon
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
golang-github-gocolly-colly-2
dnscrypt-proxy
golang-github-cespare-xxhash
conmon (Red Hat package)
golang-github-nicksnyder-i18n-2
golang-github-path-network-mmproxy
golang-github-onsi-ginkgo-2
golang-github-shopify-toxiproxy
nats-server
golang-github-colinmarc-hdfs-2
golang-mvdan-xurls
golang-github-kyokomi-emoji
golang-github-mmarkdown-mmark
haproxy (Red Hat package)
caddy
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python2-hwdata
meshbird
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
golang-github-haproxytech-dataplaneapi
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
golang-github-gdamore-tcell-2
subfinder
python-amqp (Red Hat package)
golang-github-haproxytech-client-native
golang-github-skynetservices-skydns
vgrep
python-oslo-versionedobjects (Red Hat package)
golang-gopkg-square-jose-2
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
golang-github-pressly-goose
golang-github-docker-distribution
golang-github-grpc-ecosystem-gateway-2
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
golang-github-tdewolff-minify
gh
vultr-cli
python-proliantutils (Red Hat package)
ignition
ignition (Red Hat package)
openvswitch2.17 (Red Hat package)
direnv
golang-github-uber-jaeger-client
bettercap
golang-github-prometheus-prometheus
golang-github-prometheus
golang-github-apache-beam-2
snapd
container-selinux
container-selinux (Red Hat package)
golang-github-distribution-3
podman-docker
podman-tests
podman-remote
podman-plugins
podman
podman-catatonit
yubihsm-connector
golang-github-gojuno-minimock
exercism
golang-github-aliyun-cli
python-cachetools (Red Hat package)
gobuster
golang-github-google-martian
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
golang-github-dgrijalva-jwt
python-statsd (Red Hat package)
golang-github-jwt
python-paste (Red Hat package)
python-simplejson
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
golang-mvdan-sh-3
podman-debuginfo
podman-cni-config
podman-remote-debuginfo
tiedot
python-stevedore (Red Hat package)
golang-github-mholt-archiver
etcd
python-glanceclient (Red Hat package)
golang-github-shulhan-bindata
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
golang-github-task
criu
crit
python3-criu
criu-devel
criu-libs
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python3-podman
podman-gvproxy
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
golang-github-pierrec-lz4
spacewalk-setup
spacecmd
spacewalk-utils-extras
spacewalk-utils
susemanager-schema
spacewalk-backend-applet
spacewalk-backend-sql
spacewalk-backend-xmlrpc
spacewalk-backend-server
spacewalk-backend-sql-postgresql
spacewalk-backend-package-push-server
spacewalk-backend
spacewalk-backend-app
spacewalk-backend-iss-export
spacewalk-backend-config-files
spacewalk-backend-iss
spacewalk-backend-xml-export-libs
spacewalk-backend-tools
spacewalk-backend-config-files-common
spacewalk-backend-config-files-tool
spacewalk-html
spacewalk-base-minimal-config
susemanager-web-libs
spacewalk-base-minimal
spacewalk-base
susemanager
susemanager-tools
uyuni-config-modules
susemanager-sls
spacewalk-java-config
spacewalk-java
spacewalk-java-lib
spacewalk-java-postgresql
spacewalk-taskomatic
patterns-suma_retail
patterns-suma_server
susemanager-docs_en
susemanager-docs_en-pdf
susemanager-doc-indexes
python-oslo-serialization (Red Hat package)
libslirp-devel
libslirp
supportutils-plugin-susemanager-client
uyuni-proxy-systemd-services
mgr-custom-info
spacewalk-remote-utils
python2-suseRegisterInfo
suseRegisterInfo
python3-suseRegisterInfo
python2-uyuni-common-libs
python2-mgr-push
mgr-push
mgr-daemon
python2-rhnlib
python3-uyuni-common-libs
python3-mgr-push
python3-rhnlib
mgr-virtualization-host
python2-mgr-virtualization-common
python2-mgr-virtualization-host
python2-spacewalk-oscap
spacewalk-oscap
spacewalk-koan
python2-spacewalk-koan
python3-mgr-virtualization-common
python3-mgr-virtualization-host
python3-spacewalk-koan
python3-spacewalk-oscap
mgr-cfg-actions
mgr-cfg
mgr-cfg-management
python2-mgr-cfg-actions
python2-mgr-cfg
python2-mgr-cfg-client
python2-mgr-cfg-management
mgr-cfg-client
mgr-osad
python2-mgr-osad
python2-mgr-osa-common
python3-mgr-cfg-management
python3-mgr-cfg-client
python3-mgr-cfg-actions
python3-mgr-cfg
python3-mgr-osad
python3-mgr-osa-common
python2-spacewalk-check
python2-spacewalk-client-setup
python2-spacewalk-client-tools
spacewalk-check
spacewalk-client-setup
spacewalk-client-tools
python3-spacewalk-check
python3-spacewalk-client-tools
python3-spacewalk-client-setup
release-notes-susemanager-proxy
release-notes-susemanager
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
golang-github-acme-lego
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
geoipupdate
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-ansible (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
golang-gopkg-src-d-git-4
golang-github-cactus-statsd-client
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
mgrctl-lang
rust-afterburn (Red Hat package)
golang-github-evanphx-json-patch
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
apache-cloudstack-cloudmonkey
python-oslo-rootwrap (Red Hat package)
grafana
grafana (Red Hat package)
python-dracclient (Red Hat package)
golang-github-twitchtv-twirp
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
moby-engine
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
cockpit-podman
weldr-client
postgresql-jdbc
golang-honnef-tools
py27-compat-salt
salt-doc
salt-minion
salt
python3-salt
python2-salt
salt-bash-completion
salt-fish-completion
salt-zsh-completion
salt-syndic
salt-api
salt-cloud
salt-master
salt-proxy
salt-ssh
salt-standalone-formulas-configuration
salt-transactional-update
venv-salt-minion
google-guest-agent
nex
OpenShift API for Data Protection (OADP)
Vault Enterprise
Beego
Argo CD
buildah
Red Hat OpenShift Container Platform
IBM Edge Application Manager
OpenShift Serverless Client
OpenShift Service Mesh
Multicluster Engine for Kubernetes
OpenShift Virtualization
Red Hat OpenShift Serverless
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Container Platform for Windows Containers
OpenShift Logging
Red Hat OpenStack
Red Hat OpenStack for IBM Power
IBM Cloud Pak for Business Automation
IBM Robotic Process Automation
Netcool Operations Insight
IBM MQ Operator
IBM Fusion HCI
Red Hat OpenShift Dev Spaces
AMQ Broker
IBM CICS TX Advanced
IBM CICS TX Standard

Detailed vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within method label cardinality. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


How to mitigate CVE-2022-21698

Install updates from vendor's website.

Sources