Lucene search

CVE-2022-23772

🗓️ 11 Feb 2022 01:07:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 283 Views🌐 3 Media mentions

CVE-2022-23772: Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption

Reporter	Title	Published	Views	Family All 149
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-23772	8 Apr 202214:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2022-23772	4 Nov 202216:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-23772).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2022-23772	5 May 202214:42	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in golang affects IBM Cloud Automation Manager	15 Mar 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2022-23772, CVE-2022-23773, CVE-2022-23806)	22 Apr 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Celery, Golang Go, and Python affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift	12 Mar 202203:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Golang language affect IBM Event Streams	12 Jul 202214:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go, OpenSSL, Python, and XStream affect IBM Spectrum Copy Data Management	9 Jun 202217:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm

Nvd

Node

golang goRange<1.16.14

golang goRange1.17.0–1.17.7

Node

netapp beegfs_csi_driverMatch-

netapp cloud_insights_telegraf_agentMatch-

netapp kubernetes_monitoring_operatorMatch-

netapp storagegridMatch-

Node

debian debian_linuxMatch9.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/04/msg00017.html
groups	www.groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
oracle	www.oracle.com/security-alerts/cpujul2022.html
security	www.security.netapp.com/advisory/ntap-20220225-0006/
security	www.security.gentoo.org/glsa/202208-02
lists	www.lists.debian.org/debian-lts-announce/2022/04/msg00018.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Feb 2022 01:15Current

8.4High risk

Vulners AI Score8.4

CVSS27.8

CVSS37.5

EPSS0.009

CWE-190