CVE-2022-32149
Summary
| CVE | CVE-2022-32149 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-10-14 15:15:00 UTC |
| Updated | 2022-10-18 17:41:00 UTC |
| Description | An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse. |
Risk And Classification
Problem Types: CWE-772
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GO-2022-1059 - Go Packages | MISC | pkg.go.dev | |
| x/text/language: ParseAcceptLanguage takes a long time to parse complex tags · Issue #56152 · golang/go · GitHub | MISC | go.dev | |
| go.dev/cl/442235 | MISC | go.dev | |
| [security] Vulnerability in golang.org/x/text/language | MISC | groups.google.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 184247 Debian Security Update for golang-golang-x-text (CVE-2022-32149)
- 199182 Ubuntu Security Notification for Go Text Vulnerabilities (USN-5873-1)
- 241747 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2023:3613)
- 357051 Amazon Linux Security Advisory for containerd : ALAS2DOCKER-2024-035
- 357058 Amazon Linux Security Advisory for containerd : ALAS2NITRO-ENCLAVES-2024-035
- 378883 Splunk Enterprise August Third Party Package Updates (SVD-2023-0808)
- 502841 Alpine Linux Security Update for docker-cli-compose
- 502856 Alpine Linux Security Update for gitea
- 505740 Alpine Linux Security Update for gitea
- 710660 Gentoo Linux Gitea Multiple Vulnerabilities (GLSA 202210-14)
- 754116 SUSE Enterprise Linux Security Update for SUSE Manager Client Tools (SUSE-SU-2023:2578-1)
- 754978 SUSE Enterprise Linux Security Update for SUSE Manager Client Tools (SUSE-SU-2023:3868-1)
- 754979 SUSE Enterprise Linux Security Update for SUSE Manager Client Tools (SUSE-SU-2023:3867-1)
- 770197 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2023:3613)
- 907624 Common Base Linux Mariner (CBL-Mariner) Security Update for kured (31972-1)
- 907966 Common Base Linux Mariner (CBL-Mariner) Security Update for sriov-network-device-plugin (33643-1)
- 908029 Common Base Linux Mariner (CBL-Mariner) Security Update for node-problem-detector (33628)