CVE-2022-27191
HighAdvisory
Published 19 Mar 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.039
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 737
- of 17,787 indexed, latest versions
- Container images
- 767
- deployed by those charts
- Fix available
- 1 of 1
- affected package
golang.org/x/crypto/ssh Denial of service via crafted Signer
Carried by container images the latest versions of 737 of 17,787 indexed charts deploy, on 767 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+82 more | 0.0.0-20220314234659-1baeb1ce4c0b | 767 |
- OSV records
- GHSA-8c26-wmh5-6g9v
- Also known as
- GO-2021-0356
Charts affected
737 by stars
Container images carrying it
767 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| public.ecr.aws/ | efcecf98b912 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | 573779e57fae | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 5b6701d8fb31 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | cdefc81c6b2e | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 0d03a6aad575 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 28a674af1df2 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | d6fd2a9e3273 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 13aaae779248 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 5d1c2cf4c538 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | fe2e2e5a2751 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | a3b9a07648b6 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 158108f70f95 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | e6d7afb1a4bf | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | fce990dece01 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 3590af73f65a | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 0b20d2fe9a6b | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 9663f06adcb1 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | bb0a980bc2bf | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | c2ed16080689 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 71cb50263c3b | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | c010246124c2 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | e7b6203ccb37 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | a20c44021a5d | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | e1642bf8e933 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 595c548dee6f | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 81b2d775edad | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | e045b26eb6df | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 09d52508fee9 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 15fa0ed662b1 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 36ce77526145 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | ec6ab507c5da | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 4fbd63194674 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 34de6387233b | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 6d56f69b15a3 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | c4635c95730e | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 21164241c045 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 58cb99053bb3 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | a1c3843b03bc | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 107a7c73af59 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 791aef35b8d1 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | ecd26b74a01f | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | febeebebe762 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 3e010e1188f1 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 6722d5041b47 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 0bbe8b451fa3 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | c6a934439421 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | fd8bb57ef3cf | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 879b9bead838 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 088464f949de | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| quay.io/ | 91100b06e86d | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |