Name: CVE-2022-32149: Missing Release of Resource after Effective Lifetime
Published: 2022-10-14T00:00:00.000Z
Keywords: CVE, CVE-2022-32149, CWE-772, CVSS 7.5, EPSS 0.01428

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-docker-cli-composealpine-linux-upgrade-gitea	Aug 22, 2024	Oct 14, 2022
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-containerdamazon-linux-ami-2-upgrade-containerd-debuginfoamazon-linux-ami-2-upgrade-containerd-stress	Jan 23, 2024	Oct 14, 2022
Debian	View advisory ↗	debian-upgrade-golang-golang-x-text	Jul 30, 2024	Oct 14, 2022
Dell Powerstore Dsa2023366	View advisory ↗View advisory ↗	dell-powerstoreos-upgrade-latest	Oct 23, 2025	Oct 5, 2023
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-www-apps-gitea	Oct 31, 2022	Oct 14, 2022
Redhat Openshift	View advisory ↗	linuxrpm-upgrade-podman	Jun 27, 2023	Oct 14, 2022
Redhat_linux	View advisory ↗	no-fix-redhat-rpm-packageredhat-upgrade-aardvark-dnsredhat-upgrade-buildahredhat-upgrade-buildah-debuginforedhat-upgrade-buildah-debugsourceredhat-upgrade-buildah-testsredhat-upgrade-buildah-tests-debuginforedhat-upgrade-cockpit-podmanredhat-upgrade-conmonredhat-upgrade-conmon-debuginforedhat-upgrade-conmon-debugsourceredhat-upgrade-container-selinuxredhat-upgrade-containernetworking-pluginsredhat-upgrade-containernetworking-plugins-debuginforedhat-upgrade-containernetworking-plugins-debugsourceredhat-upgrade-containers-commonredhat-upgrade-critredhat-upgrade-criuredhat-upgrade-criu-debuginforedhat-upgrade-criu-debugsourceredhat-upgrade-criu-develredhat-upgrade-criu-libsredhat-upgrade-criu-libs-debuginforedhat-upgrade-crunredhat-upgrade-crun-debuginforedhat-upgrade-crun-debugsourceredhat-upgrade-fuse-overlayfsredhat-upgrade-fuse-overlayfs-debuginforedhat-upgrade-fuse-overlayfs-debugsourceredhat-upgrade-libslirpredhat-upgrade-libslirp-debuginforedhat-upgrade-libslirp-debugsourceredhat-upgrade-libslirp-develredhat-upgrade-netavarkredhat-upgrade-oci-seccomp-bpf-hookredhat-upgrade-oci-seccomp-bpf-hook-debuginforedhat-upgrade-oci-seccomp-bpf-hook-debugsourceredhat-upgrade-podmanredhat-upgrade-podman-catatonitredhat-upgrade-podman-catatonit-debuginforedhat-upgrade-podman-debuginforedhat-upgrade-podman-debugsourceredhat-upgrade-podman-dockerredhat-upgrade-podman-gvproxyredhat-upgrade-podman-gvproxy-debuginforedhat-upgrade-podman-pluginsredhat-upgrade-podman-plugins-debuginforedhat-upgrade-podman-remoteredhat-upgrade-podman-remote-debuginforedhat-upgrade-podman-testsredhat-upgrade-python3-criuredhat-upgrade-python3-podmanredhat-upgrade-runcredhat-upgrade-runc-debuginforedhat-upgrade-runc-debugsourceredhat-upgrade-skopeoredhat-upgrade-skopeo-debuginforedhat-upgrade-skopeo-debugsourceredhat-upgrade-skopeo-testsredhat-upgrade-slirp4netnsredhat-upgrade-slirp4netns-debuginforedhat-upgrade-slirp4netns-debugsourceredhat-upgrade-toolboxredhat-upgrade-toolbox-debuginforedhat-upgrade-toolbox-debugsourceredhat-upgrade-toolbox-testsredhat-upgrade-udica	Apr 29, 2024	Oct 14, 2022
Suse	—	suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-devel-32bitsuse-upgrade-bind-docsuse-upgrade-bind-utilssuse-upgrade-dracut-saltbootsuse-upgrade-golang-github-lusitaniae-apache_exportersuse-upgrade-golang-github-prometheus-node_exportersuse-upgrade-golang-github-qubitproducts-exporter_exportersuse-upgrade-grafanasuse-upgrade-libbind9-1600suse-upgrade-libbind9-1600-32bitsuse-upgrade-libdns1605suse-upgrade-libdns1605-32bitsuse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs1601-32bitsuse-upgrade-libisc1606suse-upgrade-libisc1606-32bitsuse-upgrade-libisccc1600suse-upgrade-libisccc1600-32bitsuse-upgrade-libisccfg1600suse-upgrade-libisccfg1600-32bitsuse-upgrade-libns1604suse-upgrade-libns1604-32bitsuse-upgrade-prometheus-blackbox_exportersuse-upgrade-prometheus-postgres_exportersuse-upgrade-python3-bindsuse-upgrade-spacecmdsuse-upgrade-supportutils-plugin-susemanager-clientsuse-upgrade-wire	Jun 22, 2023	Oct 14, 2022
Ubuntu	View advisory ↗	ubuntu-upgrade-golang-golang-x-text-devubuntu-upgrade-golang-x-text-dev	Mar 22, 2023	Oct 14, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub