Vulnerability · Published Mar 18, 2022 · Assigned by mitre
CVE-2022-27191
High 7.5
In plain English
A high-severity security flaw in the aardvark-dns package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.0% (higher than 90% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)4.0%top 9.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.0.1-35.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | buildah | 1:1.24.5-2.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | buildah | 1:1.27.0-2.el9 | ALSA-2022:8008 |
| AlmaLinux:8 | buildah-tests | 1:1.24.5-2.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | buildah-tests | 1:1.27.0-2.el9 | ALSA-2022:8008 |
| AlmaLinux:8 | cockpit-podman | 46-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | conmon | 2:2.1.4-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | container-selinux | 2:2.189.0-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.1.1-2.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | containers-common | 2:1-35.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | crit | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | crit | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | criu | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | criu | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | criu-devel | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | criu-devel | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | criu-libs | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | criu-libs | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | crun | 1.5-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | fuse-overlayfs | 1.9-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | libslirp | 4.4.0-1.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | libslirp | 4.4.0-1.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-1.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-1.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | netavark | 2:1.0.1-35.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.5-1.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | podman | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | podman-catatonit | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | podman-docker | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman-docker | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | podman-gvproxy | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman-gvproxy | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | podman-plugins | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman-plugins | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | podman-remote | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman-remote | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | podman-tests | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:9 | podman-tests | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux:8 | python3-criu | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | python3-criu | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | python3-podman | 4.0.0-1.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | runc | 1:1.1.4-1.module_el8.7.0+3344+484dae7b | ALSA-2022:7469 |
| AlmaLinux:8 | skopeo | 2:1.6.2-5.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | skopeo-tests | 2:1.6.2-5.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | slirp4netns | 1.1.8-2.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | slirp4netns | 1.1.8-2.module_el8.6.0+2877+8e437bf5 | ALSA-2022:7469 |
| AlmaLinux:8 | toolbox | 0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f | ALSA-2022:7469 |
| AlmaLinux:8 | udica | 0.2.6-3.module_el8.6.0+2886+d33c3efb | ALSA-2022:7469 |
| AlmaLinux:8 | udica | 0.2.6-3.module_el8.6.0+3137+d33c3efb | ALSA-2022:7469 |
| Alpine:v3.20 | coredns | 1.9.3-r0 | ALPINE-CVE-2022-27191 |
| Alpine:v3.21 | coredns | 1.9.3-r0 | ALPINE-CVE-2022-27191 |
| Alpine:v3.22 | coredns | 1.9.3-r0 | ALPINE-CVE-2022-27191 |
| Alpine:v3.23 | coredns | 1.9.3-r0 | ALPINE-CVE-2022-27191 |
| Alpine:v3.24 | coredns | 1.9.3-r0 | ALPINE-CVE-2022-27191 |
| Alpine:v3.20 | git-lfs | 3.1.2-r4 | ALPINE-CVE-2022-27191 |
| Alpine:v3.21 | git-lfs | 3.1.2-r4 | ALPINE-CVE-2022-27191 |
| Alpine:v3.22 | git-lfs | 3.1.2-r4 | ALPINE-CVE-2022-27191 |
| Alpine:v3.23 | git-lfs | 3.1.2-r4 | ALPINE-CVE-2022-27191 |
| Alpine:v3.24 | git-lfs | 3.1.2-r4 | ALPINE-CVE-2022-27191 |
| Debian:12 | golang-go.crypto | 1:0.0~git20220315.3147a52-1 | DEBIAN-CVE-2022-27191 |
| Debian:13 | golang-go.crypto | 1:0.0~git20220315.3147a52-1 | DEBIAN-CVE-2022-27191 |
| Debian:14 | golang-go.crypto | 1:0.0~git20220315.3147a52-1 | DEBIAN-CVE-2022-27191 |
| Go | golang.org/x/crypto | 0.0.0-20220314234659-1baeb1ce4c0b | GHSA-8c26-wmh5-6g9v |
| Go | golang.org/x/crypto | 0.0.0-20220314234659-1baeb1ce4c0b | GO-2021-0356 |
| Rocky Linux:8 | buildah | 1:1.24.5-2.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | cockpit-podman | 0:46-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | cockpit-podman | 0:53-1.module+el8.7.0+1078+e72fcd4f | RLSA-2022:7457 |
| Rocky Linux:8 | conmon | 2:2.1.4-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | conmon | 2:2.1.4-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | container-selinux | 2:2.189.0-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7469 |
| Rocky Linux:8 | container-selinux | 2:2.189.0-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2022:7469 |
| Rocky Linux:8 | container-selinux | 2:2.189.0-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2022:7457 |
| Rocky Linux:8 | container-selinux | 2:2.189.0-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.1.1-2.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.1.1-3.module+el8.7.0+1078+e72fcd4f | RLSA-2022:7457 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.1.1-3.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | containers-common | 2:1-35.module+el8.6.0+997+05c9d812 | RLSA-2022:7469 |
| Rocky Linux:8 | containers-common | 2:1-35.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.5.0+710+4c471e88 | RLSA-2022:7469 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.5.0+710+4c471e88 | RLSA-2022:7457 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7469 |
| Rocky Linux:8 | crun | 0:1.5-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | crun | 0:1.5-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | crun | 0:1.5-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7469 |
| Rocky Linux:8 | crun | 0:1.5-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.9-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.9-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.9-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7469 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.9-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.5.0+710+4c471e88 | RLSA-2022:7469 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.5.0+710+4c471e88 | RLSA-2022:7457 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7469 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.5-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.6-1.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.6-1.module+el8.7.0+1078+e72fcd4f | RLSA-2022:7457 |
| Rocky Linux:8 | podman | 2:4.0.2-8.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | python-podman | 0:4.0.0-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | python-podman | 0:4.0.0-1.module+el8.6.0+784+32aef5de | RLSA-2022:7469 |
| Rocky Linux:8 | runc | 1:1.1.4-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | runc | 1:1.1.4-1.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Rocky Linux:8 | skopeo | 2:1.6.2-5.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | slirp4netns | 0:1.2.0-2.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-2.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | slirp4netns | 0:1.2.0-2.module+el8.7.0+1078+e72fcd4f | RLSA-2022:7457 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-2.module+el8.6.0+784+32aef5de | RLSA-2022:7469 |
| Rocky Linux:8 | toolbox | 0:0.0.99.3-0.6.module+el8.6.0+1054+50b00ff4 | RLSA-2022:7457 |
| Rocky Linux:8 | toolbox | 0:0.0.99.3-0.5.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | toolbox | 0:0.0.99.3-0.6.module+el8.7.0+1078+e72fcd4f | RLSA-2022:7457 |
| Rocky Linux:8 | udica | 0:0.2.6-3.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7469 |
| Rocky Linux:8 | udica | 0:0.2.6-3.module+el8.6.0+971+69b94baf | RLSA-2022:7469 |
| Rocky Linux:8 | udica | 0:0.2.6-3.module+el8.6.0+971+69b94baf | RLSA-2022:7457 |
| Rocky Linux:8 | udica | 0:0.2.6-3.module+el8.7.0+1077+0e4f03d4 | RLSA-2022:7457 |
| Ubuntu:25.10 | golang-go.crypto | no fix listed | UBUNTU-CVE-2022-27191 |
| Ubuntu:26.10 | golang-go.crypto | no fix listed | UBUNTU-CVE-2022-27191 |
Affected products (as reported)
References
- https://groups.google.com/g/golang-announce x_refsource_MISC
- https://groups.google.com/g/golang-announce/c/-cp44ypCT5s x_refsource_CONFIRM
- FEDORA-2022-a4c9009f3e vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-d37fb34309 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-3a63897745 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-5cbd6de569 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-c87047f163 vendor-advisory, x_refsource_FEDORA
- https://security.netapp.com/advisory/ntap-20220429-0002/ x_refsource_CONFIRM
- FEDORA-2022-14712f9699 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-08ae2dd481 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-5e637f6cc6 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-fae3ecee19 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-ba365d3703 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-30c5ed5625 vendor-advisory, x_refsource_FEDORA