Vulnerability · Published Sep 6, 2022 · Assigned by mitre

CVE-2022-27664

High 7.5

In plain English

A high-severity security flaw in the aardvark-dns package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.5%top 10.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8aardvark-dns2:1.0.1-38.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8aardvark-dns2:1.0.1-37.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8aardvark-dns2:1.5.0-2.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8buildah1:1.24.6-5.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8buildah1:1.29.1-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8buildah1:1.24.6-7.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8buildah-tests1:1.29.1-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8buildah-tests1:1.24.6-7.module_el8.9.0+3687+dcd7ef8fALSA-2024:0121
AlmaLinux:8buildah-tests1:1.24.6-7.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8buildah-tests1:1.24.6-5.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:9butane0.16.0-1.el9ALSA-2023:2193
AlmaLinux:8cockpit-podman46-1.module_el8.7.0+3344+5bcd850fALSA-2023:2802
AlmaLinux:8cockpit-podman46-1.module_el8.7.0+3344+5bcd850fALSA-2024:0121
AlmaLinux:8cockpit-podman63.1-1.module_el8.8.0+3557+7ba9cc13ALSA-2023:2758
AlmaLinux:8conmon3:2.1.6-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8conmon2:2.1.4-1.module_el8.7.0+3344+5bcd850fALSA-2023:2802
AlmaLinux:8conmon2:2.1.4-2.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8conmon2:2.1.4-2.module_el8.9.0+3687+dcd7ef8fALSA-2024:0121
AlmaLinux:8container-selinux2:2.199.0-1.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8container-selinux2:2.205.0-2.module_el8.8.0+3557+7ba9cc13ALSA-2023:2758
AlmaLinux:8container-selinux2:2.205.0-3.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8containernetworking-plugins1:1.1.1-6.module_el8.9.0+3711+04fcca5eALSA-2024:0121
AlmaLinux:8containernetworking-plugins1:1.1.1-2.module_el8.7.0+3344+5bcd850fALSA-2023:2802
AlmaLinux:8containernetworking-plugins1:1.2.0-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8containers-common2:1-37.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8containers-common2:1-63.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8containers-common2:1-38.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8crit3.15-3.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8crit3.15-3.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8crit3.15-3.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8crit3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8crit3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8criu3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8criu3.15-3.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8criu3.15-3.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8criu3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8criu3.15-3.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8criu-devel3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8criu-devel3.15-3.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8criu-devel3.15-3.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8criu-devel3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8criu-devel3.15-3.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8criu-libs3.15-3.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8criu-libs3.15-3.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8criu-libs3.15-3.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8criu-libs3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8criu-libs3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8crun1.8.1-2.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8crun1.6-1.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8crun1.8.7-1.module_el8.9.0+3683+33eb0febALSA-2024:0121
AlmaLinux:8fuse-overlayfs1.9-1.module_el8.7.0+3344+5bcd850fALSA-2023:2802
AlmaLinux:8fuse-overlayfs1.9-2.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8fuse-overlayfs1.10-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8git-lfs2.13.3-3.el8_6ALSA-2022:7129
AlmaLinux:9git-lfs3.2.0-1.el9ALSA-2023:2357
AlmaLinux:8grafana7.5.15-4.el8ALSA-2023:2784
AlmaLinux:9grafana9.0.9-2.el9ALSA-2023:2167
AlmaLinux:8grafana-pcp3.2.0-3.el8ALSA-2023:2785
AlmaLinux:9grafana-pcp5.1.1-1.el9ALSA-2023:2177
AlmaLinux:8libslirp4.4.0-1.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8libslirp4.4.0-1.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8libslirp4.4.0-1.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8libslirp4.4.0-1.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8libslirp4.4.0-1.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8libslirp-devel4.4.0-1.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8libslirp-devel4.4.0-1.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8libslirp-devel4.4.0-1.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8libslirp-devel4.4.0-1.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8libslirp-devel4.4.0-1.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8netavark2:1.5.0-4.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8netavark2:1.0.1-37.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8netavark2:1.0.1-38.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8oci-seccomp-bpf-hook1.2.5-2.module_el8.8.0+3468+16b86c82ALSA-2024:0121
AlmaLinux:8oci-seccomp-bpf-hook1.2.8-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8oci-seccomp-bpf-hook1.2.5-2.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8osbuild-composer75-1.el8.almaALSA-2023:2780
AlmaLinux:9osbuild-composer76-2.el9_2.almaALSA-2023:2204
AlmaLinux:8osbuild-composer-core75-1.el8.almaALSA-2023:2780
AlmaLinux:9osbuild-composer-core76-2.el9_2.almaALSA-2023:2204
AlmaLinux:8osbuild-composer-dnf-json75-1.el8.almaALSA-2023:2780
AlmaLinux:9osbuild-composer-dnf-json76-2.el9_2.almaALSA-2023:2204
AlmaLinux:8osbuild-composer-worker75-1.el8.almaALSA-2023:2780
AlmaLinux:9osbuild-composer-worker76-2.el9_2.almaALSA-2023:2204
AlmaLinux:8podman2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-catatonit2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman-catatonit2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-catatonit3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-docker2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman-docker3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-docker2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-gvproxy2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-gvproxy2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman-gvproxy3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-plugins3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-plugins2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-plugins2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman-remote3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-remote2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-remote2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8podman-tests2:4.0.2-20.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8podman-tests3:4.4.1-8.module_el8.8.0+3568+e8578284ALSA-2023:2758
AlmaLinux:8podman-tests2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1ALSA-2024:0121
AlmaLinux:8python3-criu3.15-3.module_el8.6.0+3137+d33c3efbALSA-2024:0121
AlmaLinux:8python3-criu3.15-3.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8python3-criu3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8python3-criu3.15-3.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8python3-criu3.15-3.module_el8.6.0+2877+8e437bf5ALSA-2024:0121
AlmaLinux:8python3-podman4.0.0-2.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8python3-podman4.4.1-1.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8python3-podman4.0.0-1.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8python3-podman4.0.0-2.module_el8.9.0+3711+04fcca5eALSA-2024:0121
AlmaLinux:8runc1:1.1.5-2.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8runc1:1.1.4-1.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8runc1:1.1.4-1.module_el8.7.0+3344+5bcd850fALSA-2023:2802
AlmaLinux:8runc1:1.1.5-2.module_el8.9.0+3687+dcd7ef8fALSA-2024:0121
AlmaLinux:8skopeo2:1.6.2-6.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8skopeo2:1.11.2-0.2.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8skopeo2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1ALSA-2024:0121
AlmaLinux:8skopeo-tests2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1ALSA-2024:0121
AlmaLinux:8skopeo-tests2:1.11.2-0.2.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8skopeo-tests2:1.6.2-6.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8slirp4netns1.1.8-3.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8slirp4netns1.1.8-2.module_el8.6.0+3137+d33c3efbALSA-2023:2802
AlmaLinux:8slirp4netns1.2.0-2.module_el8.7.0+3407+95aa0ca9ALSA-2023:2758
AlmaLinux:8slirp4netns1.1.8-2.module_el8.6.0+2877+8e437bf5ALSA-2023:2802
AlmaLinux:8toolbox0.0.99.4-5.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8toolbox0.0.99.3-7.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8toolbox0.0.99.3-7.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:9toolbox0.0.99.3-9.el9ALSA-2023:2236
AlmaLinux:8toolbox-tests0.0.99.3-7.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8toolbox-tests0.0.99.3-7.module_el8.8.0+3468+16b86c82ALSA-2023:2802
AlmaLinux:8toolbox-tests0.0.99.4-5.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:9toolbox-tests0.0.99.3-9.el9ALSA-2023:2236
AlmaLinux:8udica0.2.6-4.module_el8.9.0+3627+db8ec155ALSA-2024:0121
AlmaLinux:8udica0.2.6-20.module_el8.8.0+3470+252b1910ALSA-2023:2758
AlmaLinux:8udica0.2.6-3.module_el8.6.0+2886+d33c3efbALSA-2023:2802
AlmaLinux:8weldr-client35.9-2.el8ALSA-2023:2780
AlmaLinux:9weldr-client35.9-1.el9ALSA-2023:2204
Alpine:v3.20docker-cli-compose2.15.1-r0ALPINE-CVE-2022-27664
Alpine:v3.21docker-cli-compose2.15.1-r0ALPINE-CVE-2022-27664
Alpine:v3.22docker-cli-compose2.15.1-r0ALPINE-CVE-2022-27664
Alpine:v3.23docker-cli-compose2.15.1-r0ALPINE-CVE-2022-27664
Alpine:v3.24docker-cli-compose2.15.1-r0ALPINE-CVE-2022-27664
Alpine:v3.20go1.19.1-r0ALPINE-CVE-2022-27664
Alpine:v3.21go1.19.1-r0ALPINE-CVE-2022-27664
Alpine:v3.22go1.19.1-r0ALPINE-CVE-2022-27664
Alpine:v3.23go1.19.1-r0ALPINE-CVE-2022-27664
Alpine:v3.24go1.19.1-r0ALPINE-CVE-2022-27664
Debian:12golang-1.191.19.1-1DEBIAN-CVE-2022-27664
Debian:12golang-golang-x-net1:0.0+git20221012.0b7e1fb+dfsg-1DEBIAN-CVE-2022-27664
Debian:13golang-golang-x-net1:0.0+git20221012.0b7e1fb+dfsg-1DEBIAN-CVE-2022-27664
Debian:14golang-golang-x-net1:0.0+git20221012.0b7e1fb+dfsg-1DEBIAN-CVE-2022-27664
Gogolang.org/x/net0.0.0-20220906165146-f3363e06e74cGO-2022-0969
Gogolang.org/x/net0.0.0-20220906165146-f3363e06e74cGHSA-69cg-p879-7622
Gogolang.org/x/net/http20.0.0-20220906165146-f3363e06e74cGHSA-69cg-p879-7622
Gostdlib1.18.6, 1.19.1GO-2022-0969
Rocky Linux:8buildah1:1.24.6-7.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8cockpit-podman0:46-1.module+el8.9.0+1445+07728297RLSA-2023:2802
Rocky Linux:8cockpit-podman0:46-1.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8conmon2:2.1.4-2.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8container-selinux2:2.205.0-3.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8containers-common2:1-38.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8criu0:3.15-3.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8criu0:3.15-3.module+el8.9.0+1445+07728297RLSA-2023:2758
Rocky Linux:8criu0:3.15-3.module+el8.9.0+1445+07728297RLSA-2023:2802
Rocky Linux:8fuse-overlayfs0:1.9-2.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8git-lfs0:2.13.3-3.el8_6RLSA-2022:7129
Rocky Linux:9grafana-pcp0:5.1.1-14.el9_7RLSA-2023:2177
Rocky Linux:8libslirp0:4.4.0-1.module+el8.9.0+1445+07728297RLSA-2023:2802
Rocky Linux:8libslirp0:4.4.0-1.module+el8.9.0+1445+07728297RLSA-2023:2758
Rocky Linux:8libslirp0:4.4.0-1.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8oci-seccomp-bpf-hook0:1.2.5-2.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8oci-seccomp-bpf-hook0:1.2.5-2.module+el8.9.0+1445+07728297RLSA-2023:2802
Rocky Linux:8python-podman0:4.0.0-2.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8runc1:1.1.5-2.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8skopeo2:1.6.2-9.module+el8.9.0+1578+aa900b44RLSA-2024:0121
Rocky Linux:8slirp4netns0:1.1.8-3.module+el8.9.0+1445+07728297RLSA-2024:0121
Rocky Linux:8udica0:0.2.6-4.module+el8.9.0+1445+07728297RLSA-2024:0121
Ubuntu:22.04:LTSgolang-1.131.13.8-1ubuntu2.22.04.2USN-6038-2
Ubuntu:22.04:LTSgolang-1.131.13.8-1ubuntu2.22.04.2UBUNTU-CVE-2022-27664
Ubuntu:22.04:LTSgolang-1.17no fix listedUBUNTU-CVE-2022-27664
Ubuntu:22.04:LTSgolang-1.181.18.1-1ubuntu1.1USN-6038-1
Ubuntu:22.04:LTSgolang-1.181.18.1-1ubuntu1.1UBUNTU-CVE-2022-27664
Ubuntu:22.04:LTSgolang-golang-x-net1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1USN-8900-1
Ubuntu:22.04:LTSgolang-golang-x-net1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1UBUNTU-CVE-2022-27664
Ubuntu:22.04:LTSgoogle-guest-agent20231004.02-0ubuntu1~22.04.3UBUNTU-CVE-2022-27664

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References