vulnerability
Amazon Linux AMI 2: CVE-2022-1996: Security patch for go-rpm-macros, golang, golang-github-godbus-dbus, golang-github-gorilla-context, golang-github-gorilla-mux, golang-github-kr-pty, golang-github-syndtr-gocapability, golang-googlecode-net, golang-googlecode-sqlite, golist, runc (Multiple Advisories)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | 2022-06-08 | 2022-10-11 | 2022-10-24 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
2022-06-08
Added
2022-10-11
Modified
2022-10-24
Description
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
Solution(s)
amazon-linux-ami-2-upgrade-go-filesystemamazon-linux-ami-2-upgrade-go-rpm-macrosamazon-linux-ami-2-upgrade-go-rpm-templatesamazon-linux-ami-2-upgrade-go-srpm-macrosamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-github-godbus-dbus-develamazon-linux-ami-2-upgrade-golang-github-gorilla-context-develamazon-linux-ami-2-upgrade-golang-github-gorilla-mux-develamazon-linux-ami-2-upgrade-golang-github-kr-pty-develamazon-linux-ami-2-upgrade-golang-github-syndtr-gocapability-develamazon-linux-ami-2-upgrade-golang-googlecode-net-develamazon-linux-ami-2-upgrade-golang-googlecode-sqlite-develamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfo
References
- AMAZON-AL2/ALAS-2022-1846
- AMAZON-AL2/ALAS-2022-1847
- AMAZON-AL2/ALAS-2022-1858
- AMAZON-AL2/ALAS-2022-1859
- AMAZON-AL2/ALAS-2022-1860
- AMAZON-AL2/ALAS-2022-1861
- AMAZON-AL2/ALAS-2022-1862
- AMAZON-AL2/ALAS-2022-1863
- AMAZON-AL2/ALAS-2022-1864
- AMAZON-AL2/ALAS-2022-1865
- AMAZON-AL2/ALASDOCKER-2022-020
- CVE-2022-1996
- https://attackerkb.com/topics/CVE-2022-1996

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.