CVE-2022-1705: Improper sanitization of Transfer-Encoding headers in net/http

Published Jul 12, 2022
·
Updated

A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid.

Other sources

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.

Improper sanitization of Transfer-Encoding headers in net/http

Microsoft

The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to reject the header as invalid.

Red Hat

Affected Software

179 affected componentsFixes available
redhat/skupper-cli<0:1.0.2-2.el8
0:1.0.2-2.el8
redhat/libsodium<0:1.0.16-5.el8
0:1.0.16-5.el8
redhat/openstack-ironic<1:20.2.1-0.20220628175043.b5ed57a.el8
1:20.2.1-0.20220628175043.b5ed57a.el8
redhat/openstack-ironic-inspector<0:10.12.1-0.20220513095437.6dd37e5.el8
0:10.12.1-0.20220513095437.6dd37e5.el8
redhat/openstack-ironic-python-agent<0:8.6.1-0.20220623075054.1d50c23.el8
0:8.6.1-0.20220623075054.1d50c23.el8
redhat/pyparsing<0:2.3.1-2.el8
0:2.3.1-2.el8
redhat/pysnmp<0:4.4.8-3.el8
0:4.4.8-3.el8
redhat/python-alembic<0:1.4.2-6.el8
0:1.4.2-6.el8
redhat/python-amqp<0:2.5.2-8.el8
0:2.5.2-8.el8
redhat/python-appdirs<0:1.4.0-8.el8
0:1.4.0-8.el8
redhat/python-automaton<0:2.5.0-0.20220509195848.aaca110.el8
0:2.5.0-0.20220509195848.aaca110.el8
redhat/python-bcrypt<0:3.1.6-3.el8
0:3.1.6-3.el8
redhat/python-beautifulsoup4<0:4.9.3-2.el8
0:4.9.3-2.el8
redhat/python-cachetools<0:3.1.0-3.el8
0:3.1.0-3.el8
redhat/python-cinderclient<0:8.3.0-0.20220509212734.ee59b68.el8
0:8.3.0-0.20220509212734.ee59b68.el8
redhat/python-cliff<0:3.10.1-0.20220509200732.a04a48f.el8
0:3.10.1-0.20220509200732.a04a48f.el8
redhat/python-colorama<0:0.4.1-2.el8
0:0.4.1-2.el8
redhat/python-construct<0:2.10.56-2.el8
0:2.10.56-2.el8
redhat/python-dataclasses<0:0.8-3.el8
0:0.8-3.el8
redhat/python-debtcollector<0:2.5.0-0.20220509211533.a6b46c5.el8
0:2.5.0-0.20220509211533.a6b46c5.el8
redhat/python-decorator<0:4.4.0-6.el8
0:4.4.0-6.el8
redhat/python-dogpile-cache<0:1.1.2-2.el8
0:1.1.2-2.el8
redhat/python-dracclient<0:8.0.0-0.20220509201613.9c7499c.el8
0:8.0.0-0.20220509201613.9c7499c.el8
redhat/python-editor<0:1.0.4-5.el8
0:1.0.4-5.el8
redhat/python-fasteners<0:0.14.1-21.el8
0:0.14.1-21.el8
redhat/python-flask<1:1.1.1-2.el8
1:1.1.1-2.el8
redhat/python-funcsigs<0:1.0.2-17.el8
0:1.0.2-17.el8
redhat/python-futurist<0:2.4.1-0.20220509215250.159d752.el8
0:2.4.1-0.20220509215250.159d752.el8
redhat/python-glanceclient<1:3.6.0-0.20220509212414.626c500.el8
1:3.6.0-0.20220509212414.626c500.el8
redhat/python-greenlet<0:0.4.14-6.el8
0:0.4.14-6.el8
redhat/python-hardware<0:0.29.0-0.20220216015636.7662a1d.el8
0:0.29.0-0.20220216015636.7662a1d.el8
redhat/python-ifaddr<0:0.1.6-6.el8
0:0.1.6-6.el8
redhat/python-importlib-metadata<0:1.7.0-2.el8
0:1.7.0-2.el8
redhat/python-ironic-lib<0:5.1.1-0.20220225151335.e205816.el8
0:5.1.1-0.20220225151335.e205816.el8
redhat/python-ironic-prometheus-exporter<0:3.1.1-0.20220324125409.db1a824.el8
0:3.1.1-0.20220324125409.db1a824.el8
redhat/python-iso8601<0:0.1.12-9.el8
0:0.1.12-9.el8
redhat/python-jsonpath-rw<0:1.2.3-23.el8
0:1.2.3-23.el8
redhat/python-jsonschema<0:3.2.0-6.el8
0:3.2.0-6.el8
redhat/python-kazoo<0:2.7.0-2.el8
0:2.7.0-2.el8
redhat/python-keyring<0:21.0.0-2.el8
0:21.0.0-2.el8
redhat/python-keystoneauth1<0:4.5.0-0.20220509213157.8da0a63.el8
0:4.5.0-0.20220509213157.8da0a63.el8
redhat/python-keystoneclient<1:4.4.0-0.20220509200759.100253d.el8
1:4.4.0-0.20220509200759.100253d.el8
redhat/python-keystonemiddleware<0:9.4.0-0.20220509211054.8a05709.el8
0:9.4.0-0.20220509211054.8a05709.el8
redhat/python-kombu<1:4.6.6-8.el8
1:4.6.6-8.el8
redhat/python-logutils<0:0.3.5-7.1.el8
0:0.3.5-7.1.el8
redhat/python-memcached<0:1.58-12.el8
0:1.58-12.el8
redhat/python-migrate<0:0.13.0-2.el8
0:0.13.0-2.el8
redhat/python-msgpack<0:0.6.2-2.el8
0:0.6.2-2.el8
redhat/python-munch<0:2.3.2-7.el8
0:2.3.2-7.el8
redhat/python-openstacksdk<0:0.61.0-0.20220509201549.26c9bc2.el8
0:0.61.0-0.20220509201549.26c9bc2.el8
redhat/python-osc-lib<0:2.5.0-0.20220509211843.78d276e.el8
0:2.5.0-0.20220509211843.78d276e.el8
redhat/python-oslo-cache<0:2.8.1-0.20220216000746.40946a9.el8
0:2.8.1-0.20220216000746.40946a9.el8
redhat/python-oslo-concurrency<0:4.5.1-0.20220509221157.145f060.el8
0:4.5.1-0.20220509221157.145f060.el8
redhat/python-oslo-config<2:8.8.0-0.20220509202553.64c82a0.el8
2:8.8.0-0.20220509202553.64c82a0.el8
redhat/python-oslo-context<0:4.1.0-0.20220509205437.3400cc2.el8
0:4.1.0-0.20220509205437.3400cc2.el8
redhat/python-oslo-db<0:9.1.0-0.20220216003829.be2cc6a.el8
0:9.1.0-0.20220216003829.be2cc6a.el8
redhat/python-oslo-i18n<0:5.1.0-0.20220216011159.b031d17.el8
0:5.1.0-0.20220216011159.b031d17.el8
redhat/python-oslo-log<0:4.6.0-0.20220216002407.41c8807.el8
0:4.6.0-0.20220216002407.41c8807.el8
redhat/python-oslo-messaging<0:12.13.0-0.20220509210748.2d090b5.el8
0:12.13.0-0.20220509210748.2d090b5.el8
redhat/python-oslo-metrics<0:0.3.0-0.20220216012738.43eee50.el8
0:0.3.0-0.20220216012738.43eee50.el8
redhat/python-oslo-middleware<0:4.5.1-0.20220509203328.2f72b30.el8
0:4.5.1-0.20220509203328.2f72b30.el8
redhat/python-oslo-policy<0:3.12.1-0.20220509221328.9673a74.el8
0:3.12.1-0.20220509221328.9673a74.el8
redhat/python-oslo-rootwrap<0:6.3.1-0.20220509204453.1b1b960.el8
0:6.3.1-0.20220509204453.1b1b960.el8
redhat/python-oslo-serialization<0:4.3.0-0.20220509195921.6910f75.el8
0:4.3.0-0.20220509195921.6910f75.el8
redhat/python-oslo-service<0:2.8.0-0.20220509203713.6552b9a.el8
0:2.8.0-0.20220509203713.6552b9a.el8
redhat/python-oslo-upgradecheck<0:1.5.0-0.20220509195112.1559e03.el8
0:1.5.0-0.20220509195112.1559e03.el8
redhat/python-oslo-utils<0:4.13.0-0.20220509213520.de4429f.el8
0:4.13.0-0.20220509213520.de4429f.el8
redhat/python-oslo-versionedobjects<0:2.6.0-0.20220509202736.25d34d6.el8
0:2.6.0-0.20220509202736.25d34d6.el8
redhat/python-osprofiler<0:3.4.3-0.20220509214403.3286301.el8
0:3.4.3-0.20220509214403.3286301.el8
redhat/python-os-service-types<0:1.7.0-0.20220215231659.0b2f473.el8
0:1.7.0-0.20220215231659.0b2f473.el8
redhat/python-os-traits<0:2.7.0-0.20220509205801.3d1dbf0.el8
0:2.7.0-0.20220509205801.3d1dbf0.el8
redhat/python-packaging<0:20.4-2.el8
0:20.4-2.el8
redhat/python-paste<0:3.2.4-2.el8
0:3.2.4-2.el8
redhat/python-paste-deploy<0:2.0.1-5.el8
0:2.0.1-5.el8
redhat/python-pbr<0:5.5.1-2.el8
0:5.5.1-2.el8
redhat/python-pecan<0:1.3.2-10.el8
0:1.3.2-10.el8
redhat/python-pexpect<0:4.6-3.el8
0:4.6-3.el8
redhat/python-pint<0:0.10.1-3.el8
0:0.10.1-3.el8
redhat/python-proliantutils<0:2.13.2-0.20220509214147.8c7b6b1.el8
0:2.13.2-0.20220509214147.8c7b6b1.el8
redhat/python-pycadf<0:3.1.1-0.20220215232623.4179996.el8
0:3.1.1-0.20220215232623.4179996.el8
redhat/python-pycdlib<0:1.11.0-4.el8
0:1.11.0-4.el8
redhat/python-pynacl<0:1.3.0-6.el8
0:1.3.0-6.el8
redhat/python-pyperclip<0:1.6.4-7.el8
0:1.6.4-7.el8
redhat/python-pyrsistent<0:0.16.0-4.el8
0:0.16.0-4.el8
redhat/python-redis<0:3.3.8-2.el8
0:3.3.8-2.el8
redhat/python-repoze-lru<0:0.7-7.el8
0:0.7-7.el8
redhat/python-requestsexceptions<0:1.4.0-0.20220215231659.d7ac0ff.el8
0:1.4.0-0.20220215231659.d7ac0ff.el8
redhat/python-retrying<0:1.2.3-22.el8
0:1.2.3-22.el8
redhat/python-rfc3986<0:1.2.0-6.el8
0:1.2.0-6.el8
redhat/python-routes<0:2.4.1-12.el8
0:2.4.1-12.el8
redhat/python-scciclient<0:0.11.1-0.20220216020832.a84332b.el8
0:0.11.1-0.20220216020832.a84332b.el8
redhat/python-simplegeneric<0:0.8.1-18.el8
0:0.8.1-18.el8
redhat/python-simplejson<0:3.17.0-2.el8
0:3.17.0-2.el8
redhat/python-singledispatch<0:3.4.0.3-19.el8
0:3.4.0.3-19.el8
redhat/python-six<0:1.15.0-3.el8
0:1.15.0-3.el8
redhat/python-soupsieve<0:2.1.0-2.el8
0:2.1.0-2.el8
redhat/python-sqlparse<0:0.2.4-10.el8
0:0.2.4-10.el8
redhat/python-statsd<0:3.2.1-17.el8
0:3.2.1-17.el8
redhat/python-stevedore<0:3.5.0-0.20220509195112.442f157.el8
0:3.5.0-0.20220509195112.442f157.el8
redhat/python-sushy<0:4.1.1-0.20220302175405.c769149.el8
0:4.1.1-0.20220302175405.c769149.el8
redhat/python-sushy-oem-idrac<0:4.0.0-0.20220324125409.7b75e6e.el8
0:4.0.0-0.20220324125409.7b75e6e.el8
redhat/python-swiftclient<0:3.13.1-0.20220509204112.4989d94.el8
0:3.13.1-0.20220509204112.4989d94.el8
redhat/python-tempita<0:0.5.1-25.el8
0:0.5.1-25.el8
redhat/python-tenacity<0:6.2.0-2.el8
0:6.2.0-2.el8
redhat/python-tooz<0:2.11.1-0.20220509215238.96f91b9.el8
0:2.11.1-0.20220509215238.96f91b9.el8
redhat/python-vine<0:1.3.0-5.el8
0:1.3.0-5.el8
redhat/python-voluptuous<0:0.11.7-3.el8
0:0.11.7-3.el8
redhat/python-waitress<0:2.0.0-2.el8
0:2.0.0-2.el8
redhat/python-warlock<0:1.3.3-2.el8
0:1.3.3-2.el8
redhat/python-wcwidth<0:0.1.7-15.el8
0:0.1.7-15.el8
redhat/python-webob<0:1.8.5-5.el8
0:1.8.5-5.el8
redhat/python-webtest<0:2.0.33-5.el8
0:2.0.33-5.el8
redhat/python-werkzeug<0:2.0.3-1.el8
0:2.0.3-1.el8
redhat/python-wrapt<0:1.11.2-4.el8
0:1.11.2-4.el8
redhat/python-wsme<0:0.11.0-0.20220216004816.80bda90.el8
0:0.11.0-0.20220216004816.80bda90.el8
redhat/python-yappi<0:1.0-3.el8
0:1.0-3.el8
redhat/python-zake<0:0.2.2-19.el8
0:0.2.2-19.el8
redhat/python-zeroconf<0:0.24.4-2.el8
0:0.24.4-2.el8
redhat/python-zipp<0:0.5.1-3.el8
0:0.5.1-3.el8
redhat/openshift-serverless-clients<0:1.3.1-4.el8
0:1.3.1-4.el8
redhat/go-toolset<1.17-golang-0:1.17.12-1.el7_9
1.17-golang-0:1.17.12-1.el7_9
redhat/git-lfs<0:2.13.3-3.el8_6
0:2.13.3-3.el8_6
redhat/grafana<0:7.5.15-3.el8
0:7.5.15-3.el8
redhat/grafana-pcp<0:3.2.0-2.el8
0:3.2.0-2.el8
redhat/golang<0:1.17.12-1.el9_0
0:1.17.12-1.el9_0
redhat/grafana<0:7.5.15-3.el9
0:7.5.15-3.el9
redhat/toolbox<0:0.0.99.3-5.el9
0:0.0.99.3-5.el9
redhat/grafana-pcp<0:3.2.0-3.el9
0:3.2.0-3.el9
redhat/git-lfs<0:3.2.0-1.el9
0:3.2.0-1.el9
redhat/atomic-openshift-service-idler<0:4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
0:4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
redhat/buildah<1:1.23.4-2.el8
1:1.23.4-2.el8
redhat/butane<0:0.15.0-1.rhaos4.11.el8
0:0.15.0-1.rhaos4.11.el8
redhat/conmon<2:2.1.2-2.rhaos4.11.el8
2:2.1.2-2.rhaos4.11.el8
redhat/console-login-helper-messages<0:0.20.3-2.rhaos4.11.el8
0:0.20.3-2.rhaos4.11.el8
redhat/containernetworking-plugins<0:1.0.1-5.rhaos4.11.el8
0:1.0.1-5.rhaos4.11.el8
redhat/containers-common<2:1-21.rhaos4.11.el8
2:1-21.rhaos4.11.el8
redhat/container-selinux<2:2.188.0-1.rhaos4.11.el8
2:2.188.0-1.rhaos4.11.el8
redhat/coreos-installer<0:0.15.0-2.rhaos4.11.el8
0:0.15.0-2.rhaos4.11.el8
redhat/cri-o<0:1.24.1-11.rhaos4.11.gitb0d2ef3.el8
0:1.24.1-11.rhaos4.11.gitb0d2ef3.el8
redhat/cri-tools<0:1.24.2-4.1.el8
0:1.24.2-4.1.el8
redhat/criu<0:3.15-4.rhaos4.11.el8
0:3.15-4.rhaos4.11.el8
redhat/crun<0:1.4.2-1.rhaos4.11.el8
0:1.4.2-1.rhaos4.11.el8
redhat/fuse-overlayfs<0:1.9-1.rhaos4.11.el8
0:1.9-1.rhaos4.11.el8
redhat/haproxy<0:2.2.24-1.el8
0:2.2.24-1.el8
redhat/ignition<0:2.14.0-3.rhaos4.11.el8
0:2.14.0-3.rhaos4.11.el8
redhat/kata-containers<0:2.4.2-1.el8
0:2.4.2-1.el8
redhat/libslirp<0:4.4.0-2.rhaos4.11.el8
0:4.4.0-2.rhaos4.11.el8
redhat/openshift<0:4.11.0-202207082037.p0.g9546431.assembly.stream.el8
0:4.11.0-202207082037.p0.g9546431.assembly.stream.el8
redhat/openshift-ansible<0:4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
0:4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
redhat/openshift-clients<0:4.11.0-202207291716.p0.g7075089.assembly.stream.el8
0:4.11.0-202207291716.p0.g7075089.assembly.stream.el8
redhat/openshift-kuryr<0:4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
0:4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
redhat/openvswitch2.17<0:2.17.0-22.el8fd
0:2.17.0-22.el8fd
redhat/ovn22.03<0:22.03.0-37.el8fd
0:22.03.0-37.el8fd
redhat/ovn22.06<0:22.06.0-27.el8fd
0:22.06.0-27.el8fd
redhat/podman<2:4.0.2-6.rhaos4.11.el8
2:4.0.2-6.rhaos4.11.el8
redhat/runc<3:1.1.2-1.rhaos4.11.el8
3:1.1.2-1.rhaos4.11.el8
redhat/rust-afterburn<0:5.3.0-1.rhaos4.11.el8
0:5.3.0-1.rhaos4.11.el8
redhat/rust-bootupd<0:0.2.5-3.rhaos4.11.el8
0:0.2.5-3.rhaos4.11.el8
redhat/skopeo<2:1.5.2-3.rhaos4.11.el8
2:1.5.2-3.rhaos4.11.el8
redhat/slirp4netns<0:1.1.8-1.rhaos4.11.el8
0:1.1.8-1.rhaos4.11.el8
redhat/toolbox<0:0.0.9-1.rhaos4.11.el8
0:0.0.9-1.rhaos4.11.el8
redhat/cri-o<0:1.24.3-6.rhaos4.11.gitc4567c0.el8
0:1.24.3-6.rhaos4.11.gitc4567c0.el8
redhat/cri-tools<0:1.24.2-7.el8
0:1.24.2-7.el8
redhat/butane<0:0.16.0-2.rhaos4.12.el8
0:0.16.0-2.rhaos4.12.el8
redhat/ignition<0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
redhat/etcd<0:3.3.23-12.el8
0:3.3.23-12.el8
redhat/kubevirt<0:4.12.0-1057.el7
0:4.12.0-1057.el7
redhat/kubevirt<0:4.12.0-1057.el8
0:4.12.0-1057.el8
debian/golang-1.15<=1.15.15-1~deb11u4
debian/golang-1.19
1.19.8-2
Golang Go<1.17.12
Golang Go>=1.18.0<1.18.4
IBM Business Automation Insights<=25.0.0
IBM Business Automation Insights<=24.0.1
IBM Business Automation Insights<=24.0.0
redhat/golang<1.18.4
1.18.4
redhat/golang<1.17.12
1.17.12
Microsoft cbl2 golang 1.18.5-1<1.18.5-1
1.18.5-1
Microsoft cm1 golang 1.18.5-1<1.18.5-1
1.18.5-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/skupper-cli to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-2.el8
  2. Upgrade

    Upgrade redhat/libsodium to a version that resolves this vulnerability.

    Fixed in 0:1.0.16-5.el8
  3. Upgrade

    Upgrade redhat/openstack-ironic to a version that resolves this vulnerability.

    Fixed in 1:20.2.1-0.20220628175043.b5ed57a.el8
  4. Upgrade

    Upgrade redhat/openstack-ironic-inspector to a version that resolves this vulnerability.

    Fixed in 0:10.12.1-0.20220513095437.6dd37e5.el8
  5. Upgrade

    Upgrade redhat/openstack-ironic-python-agent to a version that resolves this vulnerability.

    Fixed in 0:8.6.1-0.20220623075054.1d50c23.el8
  6. Upgrade

    Upgrade redhat/pyparsing to a version that resolves this vulnerability.

    Fixed in 0:2.3.1-2.el8
  7. Upgrade

    Upgrade redhat/pysnmp to a version that resolves this vulnerability.

    Fixed in 0:4.4.8-3.el8
  8. Upgrade

    Upgrade redhat/python-alembic to a version that resolves this vulnerability.

    Fixed in 0:1.4.2-6.el8
  9. Upgrade

    Upgrade redhat/python-amqp to a version that resolves this vulnerability.

    Fixed in 0:2.5.2-8.el8
  10. Upgrade

    Upgrade redhat/python-appdirs to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-8.el8
  11. Upgrade

    Upgrade redhat/python-automaton to a version that resolves this vulnerability.

    Fixed in 0:2.5.0-0.20220509195848.aaca110.el8
  12. Upgrade

    Upgrade redhat/python-bcrypt to a version that resolves this vulnerability.

    Fixed in 0:3.1.6-3.el8
  13. Upgrade

    Upgrade redhat/python-beautifulsoup4 to a version that resolves this vulnerability.

    Fixed in 0:4.9.3-2.el8
  14. Upgrade

    Upgrade redhat/python-cachetools to a version that resolves this vulnerability.

    Fixed in 0:3.1.0-3.el8
  15. Upgrade

    Upgrade redhat/python-cinderclient to a version that resolves this vulnerability.

    Fixed in 0:8.3.0-0.20220509212734.ee59b68.el8
  16. Upgrade

    Upgrade redhat/python-cliff to a version that resolves this vulnerability.

    Fixed in 0:3.10.1-0.20220509200732.a04a48f.el8
  17. Upgrade

    Upgrade redhat/python-colorama to a version that resolves this vulnerability.

    Fixed in 0:0.4.1-2.el8
  18. Upgrade

    Upgrade redhat/python-construct to a version that resolves this vulnerability.

    Fixed in 0:2.10.56-2.el8
  19. Upgrade

    Upgrade redhat/python-dataclasses to a version that resolves this vulnerability.

    Fixed in 0:0.8-3.el8
  20. Upgrade

    Upgrade redhat/python-debtcollector to a version that resolves this vulnerability.

    Fixed in 0:2.5.0-0.20220509211533.a6b46c5.el8
  21. Upgrade

    Upgrade redhat/python-decorator to a version that resolves this vulnerability.

    Fixed in 0:4.4.0-6.el8
  22. Upgrade

    Upgrade redhat/python-dogpile-cache to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-2.el8
  23. Upgrade

    Upgrade redhat/python-dracclient to a version that resolves this vulnerability.

    Fixed in 0:8.0.0-0.20220509201613.9c7499c.el8
  24. Upgrade

    Upgrade redhat/python-editor to a version that resolves this vulnerability.

    Fixed in 0:1.0.4-5.el8
  25. Upgrade

    Upgrade redhat/python-fasteners to a version that resolves this vulnerability.

    Fixed in 0:0.14.1-21.el8
  26. Upgrade

    Upgrade redhat/python-flask to a version that resolves this vulnerability.

    Fixed in 1:1.1.1-2.el8
  27. Upgrade

    Upgrade redhat/python-funcsigs to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-17.el8
  28. Upgrade

    Upgrade redhat/python-futurist to a version that resolves this vulnerability.

    Fixed in 0:2.4.1-0.20220509215250.159d752.el8
  29. Upgrade

    Upgrade redhat/python-glanceclient to a version that resolves this vulnerability.

    Fixed in 1:3.6.0-0.20220509212414.626c500.el8
  30. Upgrade

    Upgrade redhat/python-greenlet to a version that resolves this vulnerability.

    Fixed in 0:0.4.14-6.el8
  31. Upgrade

    Upgrade redhat/python-hardware to a version that resolves this vulnerability.

    Fixed in 0:0.29.0-0.20220216015636.7662a1d.el8
  32. Upgrade

    Upgrade redhat/python-ifaddr to a version that resolves this vulnerability.

    Fixed in 0:0.1.6-6.el8
  33. Upgrade

    Upgrade redhat/python-importlib-metadata to a version that resolves this vulnerability.

    Fixed in 0:1.7.0-2.el8
  34. Upgrade

    Upgrade redhat/python-ironic-lib to a version that resolves this vulnerability.

    Fixed in 0:5.1.1-0.20220225151335.e205816.el8
  35. Upgrade

    Upgrade redhat/python-ironic-prometheus-exporter to a version that resolves this vulnerability.

    Fixed in 0:3.1.1-0.20220324125409.db1a824.el8
  36. Upgrade

    Upgrade redhat/python-iso8601 to a version that resolves this vulnerability.

    Fixed in 0:0.1.12-9.el8
  37. Upgrade

    Upgrade redhat/python-jsonpath-rw to a version that resolves this vulnerability.

    Fixed in 0:1.2.3-23.el8
  38. Upgrade

    Upgrade redhat/python-jsonschema to a version that resolves this vulnerability.

    Fixed in 0:3.2.0-6.el8
  39. Upgrade

    Upgrade redhat/python-kazoo to a version that resolves this vulnerability.

    Fixed in 0:2.7.0-2.el8
  40. Upgrade

    Upgrade redhat/python-keyring to a version that resolves this vulnerability.

    Fixed in 0:21.0.0-2.el8
  41. Upgrade

    Upgrade redhat/python-keystoneauth1 to a version that resolves this vulnerability.

    Fixed in 0:4.5.0-0.20220509213157.8da0a63.el8
  42. Upgrade

    Upgrade redhat/python-keystoneclient to a version that resolves this vulnerability.

    Fixed in 1:4.4.0-0.20220509200759.100253d.el8
  43. Upgrade

    Upgrade redhat/python-keystonemiddleware to a version that resolves this vulnerability.

    Fixed in 0:9.4.0-0.20220509211054.8a05709.el8
  44. Upgrade

    Upgrade redhat/python-kombu to a version that resolves this vulnerability.

    Fixed in 1:4.6.6-8.el8
  45. Upgrade

    Upgrade redhat/python-logutils to a version that resolves this vulnerability.

    Fixed in 0:0.3.5-7.1.el8
  46. Upgrade

    Upgrade redhat/python-memcached to a version that resolves this vulnerability.

    Fixed in 0:1.58-12.el8
  47. Upgrade

    Upgrade redhat/python-migrate to a version that resolves this vulnerability.

    Fixed in 0:0.13.0-2.el8
  48. Upgrade

    Upgrade redhat/python-msgpack to a version that resolves this vulnerability.

    Fixed in 0:0.6.2-2.el8
  49. Upgrade

    Upgrade redhat/python-munch to a version that resolves this vulnerability.

    Fixed in 0:2.3.2-7.el8
  50. Upgrade

    Upgrade redhat/python-openstacksdk to a version that resolves this vulnerability.

    Fixed in 0:0.61.0-0.20220509201549.26c9bc2.el8
  51. Upgrade

    Upgrade redhat/python-osc-lib to a version that resolves this vulnerability.

    Fixed in 0:2.5.0-0.20220509211843.78d276e.el8
  52. Upgrade

    Upgrade redhat/python-oslo-cache to a version that resolves this vulnerability.

    Fixed in 0:2.8.1-0.20220216000746.40946a9.el8
  53. Upgrade

    Upgrade redhat/python-oslo-concurrency to a version that resolves this vulnerability.

    Fixed in 0:4.5.1-0.20220509221157.145f060.el8
  54. Upgrade

    Upgrade redhat/python-oslo-config to a version that resolves this vulnerability.

    Fixed in 2:8.8.0-0.20220509202553.64c82a0.el8
  55. Upgrade

    Upgrade redhat/python-oslo-context to a version that resolves this vulnerability.

    Fixed in 0:4.1.0-0.20220509205437.3400cc2.el8
  56. Upgrade

    Upgrade redhat/python-oslo-db to a version that resolves this vulnerability.

    Fixed in 0:9.1.0-0.20220216003829.be2cc6a.el8
  57. Upgrade

    Upgrade redhat/python-oslo-i18n to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-0.20220216011159.b031d17.el8
  58. Upgrade

    Upgrade redhat/python-oslo-log to a version that resolves this vulnerability.

    Fixed in 0:4.6.0-0.20220216002407.41c8807.el8
  59. Upgrade

    Upgrade redhat/python-oslo-messaging to a version that resolves this vulnerability.

    Fixed in 0:12.13.0-0.20220509210748.2d090b5.el8
  60. Upgrade

    Upgrade redhat/python-oslo-metrics to a version that resolves this vulnerability.

    Fixed in 0:0.3.0-0.20220216012738.43eee50.el8
  61. Upgrade

    Upgrade redhat/python-oslo-middleware to a version that resolves this vulnerability.

    Fixed in 0:4.5.1-0.20220509203328.2f72b30.el8
  62. Upgrade

    Upgrade redhat/python-oslo-policy to a version that resolves this vulnerability.

    Fixed in 0:3.12.1-0.20220509221328.9673a74.el8
  63. Upgrade

    Upgrade redhat/python-oslo-rootwrap to a version that resolves this vulnerability.

    Fixed in 0:6.3.1-0.20220509204453.1b1b960.el8
  64. Upgrade

    Upgrade redhat/python-oslo-serialization to a version that resolves this vulnerability.

    Fixed in 0:4.3.0-0.20220509195921.6910f75.el8
  65. Upgrade

    Upgrade redhat/python-oslo-service to a version that resolves this vulnerability.

    Fixed in 0:2.8.0-0.20220509203713.6552b9a.el8
  66. Upgrade

    Upgrade redhat/python-oslo-upgradecheck to a version that resolves this vulnerability.

    Fixed in 0:1.5.0-0.20220509195112.1559e03.el8
  67. Upgrade

    Upgrade redhat/python-oslo-utils to a version that resolves this vulnerability.

    Fixed in 0:4.13.0-0.20220509213520.de4429f.el8
  68. Upgrade

    Upgrade redhat/python-oslo-versionedobjects to a version that resolves this vulnerability.

    Fixed in 0:2.6.0-0.20220509202736.25d34d6.el8
  69. Upgrade

    Upgrade redhat/python-osprofiler to a version that resolves this vulnerability.

    Fixed in 0:3.4.3-0.20220509214403.3286301.el8
  70. Upgrade

    Upgrade redhat/python-os-service-types to a version that resolves this vulnerability.

    Fixed in 0:1.7.0-0.20220215231659.0b2f473.el8
  71. Upgrade

    Upgrade redhat/python-os-traits to a version that resolves this vulnerability.

    Fixed in 0:2.7.0-0.20220509205801.3d1dbf0.el8
  72. Upgrade

    Upgrade redhat/python-packaging to a version that resolves this vulnerability.

    Fixed in 0:20.4-2.el8
  73. Upgrade

    Upgrade redhat/python-paste to a version that resolves this vulnerability.

    Fixed in 0:3.2.4-2.el8
  74. Upgrade

    Upgrade redhat/python-paste-deploy to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-5.el8
  75. Upgrade

    Upgrade redhat/python-pbr to a version that resolves this vulnerability.

    Fixed in 0:5.5.1-2.el8
  76. Upgrade

    Upgrade redhat/python-pecan to a version that resolves this vulnerability.

    Fixed in 0:1.3.2-10.el8
  77. Upgrade

    Upgrade redhat/python-pexpect to a version that resolves this vulnerability.

    Fixed in 0:4.6-3.el8
  78. Upgrade

    Upgrade redhat/python-pint to a version that resolves this vulnerability.

    Fixed in 0:0.10.1-3.el8
  79. Upgrade

    Upgrade redhat/python-proliantutils to a version that resolves this vulnerability.

    Fixed in 0:2.13.2-0.20220509214147.8c7b6b1.el8
  80. Upgrade

    Upgrade redhat/python-pycadf to a version that resolves this vulnerability.

    Fixed in 0:3.1.1-0.20220215232623.4179996.el8
  81. Upgrade

    Upgrade redhat/python-pycdlib to a version that resolves this vulnerability.

    Fixed in 0:1.11.0-4.el8
  82. Upgrade

    Upgrade redhat/python-pynacl to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-6.el8
  83. Upgrade

    Upgrade redhat/python-pyperclip to a version that resolves this vulnerability.

    Fixed in 0:1.6.4-7.el8
  84. Upgrade

    Upgrade redhat/python-pyrsistent to a version that resolves this vulnerability.

    Fixed in 0:0.16.0-4.el8
  85. Upgrade

    Upgrade redhat/python-redis to a version that resolves this vulnerability.

    Fixed in 0:3.3.8-2.el8
  86. Upgrade

    Upgrade redhat/python-repoze-lru to a version that resolves this vulnerability.

    Fixed in 0:0.7-7.el8
  87. Upgrade

    Upgrade redhat/python-requestsexceptions to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-0.20220215231659.d7ac0ff.el8
  88. Upgrade

    Upgrade redhat/python-retrying to a version that resolves this vulnerability.

    Fixed in 0:1.2.3-22.el8
  89. Upgrade

    Upgrade redhat/python-rfc3986 to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-6.el8
  90. Upgrade

    Upgrade redhat/python-routes to a version that resolves this vulnerability.

    Fixed in 0:2.4.1-12.el8
  91. Upgrade

    Upgrade redhat/python-scciclient to a version that resolves this vulnerability.

    Fixed in 0:0.11.1-0.20220216020832.a84332b.el8
  92. Upgrade

    Upgrade redhat/python-simplegeneric to a version that resolves this vulnerability.

    Fixed in 0:0.8.1-18.el8
  93. Upgrade

    Upgrade redhat/python-simplejson to a version that resolves this vulnerability.

    Fixed in 0:3.17.0-2.el8
  94. Upgrade

    Upgrade redhat/python-singledispatch to a version that resolves this vulnerability.

    Fixed in 0:3.4.0.3-19.el8
  95. Upgrade

    Upgrade redhat/python-six to a version that resolves this vulnerability.

    Fixed in 0:1.15.0-3.el8
  96. Upgrade

    Upgrade redhat/python-soupsieve to a version that resolves this vulnerability.

    Fixed in 0:2.1.0-2.el8
  97. Upgrade

    Upgrade redhat/python-sqlparse to a version that resolves this vulnerability.

    Fixed in 0:0.2.4-10.el8
  98. Upgrade

    Upgrade redhat/python-statsd to a version that resolves this vulnerability.

    Fixed in 0:3.2.1-17.el8
  99. Upgrade

    Upgrade redhat/python-stevedore to a version that resolves this vulnerability.

    Fixed in 0:3.5.0-0.20220509195112.442f157.el8
  100. Upgrade

    Upgrade redhat/python-sushy to a version that resolves this vulnerability.

    Fixed in 0:4.1.1-0.20220302175405.c769149.el8
  101. Upgrade

    Upgrade redhat/python-sushy-oem-idrac to a version that resolves this vulnerability.

    Fixed in 0:4.0.0-0.20220324125409.7b75e6e.el8
  102. Upgrade

    Upgrade redhat/python-swiftclient to a version that resolves this vulnerability.

    Fixed in 0:3.13.1-0.20220509204112.4989d94.el8
  103. Upgrade

    Upgrade redhat/python-tempita to a version that resolves this vulnerability.

    Fixed in 0:0.5.1-25.el8
  104. Upgrade

    Upgrade redhat/python-tenacity to a version that resolves this vulnerability.

    Fixed in 0:6.2.0-2.el8
  105. Upgrade

    Upgrade redhat/python-tooz to a version that resolves this vulnerability.

    Fixed in 0:2.11.1-0.20220509215238.96f91b9.el8
  106. Upgrade

    Upgrade redhat/python-vine to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-5.el8
  107. Upgrade

    Upgrade redhat/python-voluptuous to a version that resolves this vulnerability.

    Fixed in 0:0.11.7-3.el8
  108. Upgrade

    Upgrade redhat/python-waitress to a version that resolves this vulnerability.

    Fixed in 0:2.0.0-2.el8
  109. Upgrade

    Upgrade redhat/python-warlock to a version that resolves this vulnerability.

    Fixed in 0:1.3.3-2.el8
  110. Upgrade

    Upgrade redhat/python-wcwidth to a version that resolves this vulnerability.

    Fixed in 0:0.1.7-15.el8
  111. Upgrade

    Upgrade redhat/python-webob to a version that resolves this vulnerability.

    Fixed in 0:1.8.5-5.el8
  112. Upgrade

    Upgrade redhat/python-webtest to a version that resolves this vulnerability.

    Fixed in 0:2.0.33-5.el8
  113. Upgrade

    Upgrade redhat/python-werkzeug to a version that resolves this vulnerability.

    Fixed in 0:2.0.3-1.el8
  114. Upgrade

    Upgrade redhat/python-wrapt to a version that resolves this vulnerability.

    Fixed in 0:1.11.2-4.el8
  115. Upgrade

    Upgrade redhat/python-wsme to a version that resolves this vulnerability.

    Fixed in 0:0.11.0-0.20220216004816.80bda90.el8
  116. Upgrade

    Upgrade redhat/python-yappi to a version that resolves this vulnerability.

    Fixed in 0:1.0-3.el8
  117. Upgrade

    Upgrade redhat/python-zake to a version that resolves this vulnerability.

    Fixed in 0:0.2.2-19.el8
  118. Upgrade

    Upgrade redhat/python-zeroconf to a version that resolves this vulnerability.

    Fixed in 0:0.24.4-2.el8
  119. Upgrade

    Upgrade redhat/python-zipp to a version that resolves this vulnerability.

    Fixed in 0:0.5.1-3.el8
  120. Upgrade

    Upgrade redhat/openshift-serverless-clients to a version that resolves this vulnerability.

    Fixed in 0:1.3.1-4.el8
  121. Upgrade

    Upgrade redhat/go-toolset to a version that resolves this vulnerability.

    Fixed in 1.17-golang-0:1.17.12-1.el7_9
  122. Upgrade

    Upgrade redhat/git-lfs to a version that resolves this vulnerability.

    Fixed in 0:2.13.3-3.el8_6
  123. Upgrade

    Upgrade redhat/grafana to a version that resolves this vulnerability.

    Fixed in 0:7.5.15-3.el8
  124. Upgrade

    Upgrade redhat/grafana-pcp to a version that resolves this vulnerability.

    Fixed in 0:3.2.0-2.el8
  125. Upgrade

    Upgrade redhat/golang to a version that resolves this vulnerability.

    Fixed in 0:1.17.12-1.el9_0
  126. Upgrade

    Upgrade redhat/grafana to a version that resolves this vulnerability.

    Fixed in 0:7.5.15-3.el9
  127. Upgrade

    Upgrade redhat/toolbox to a version that resolves this vulnerability.

    Fixed in 0:0.0.99.3-5.el9
  128. Upgrade

    Upgrade redhat/grafana-pcp to a version that resolves this vulnerability.

    Fixed in 0:3.2.0-3.el9
  129. Upgrade

    Upgrade redhat/git-lfs to a version that resolves this vulnerability.

    Fixed in 0:3.2.0-1.el9
  130. Upgrade

    Upgrade redhat/atomic-openshift-service-idler to a version that resolves this vulnerability.

    Fixed in 0:4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
  131. Upgrade

    Upgrade redhat/buildah to a version that resolves this vulnerability.

    Fixed in 1:1.23.4-2.el8
  132. Upgrade

    Upgrade redhat/butane to a version that resolves this vulnerability.

    Fixed in 0:0.15.0-1.rhaos4.11.el8
  133. Upgrade

    Upgrade redhat/conmon to a version that resolves this vulnerability.

    Fixed in 2:2.1.2-2.rhaos4.11.el8
  134. Upgrade

    Upgrade redhat/console-login-helper-messages to a version that resolves this vulnerability.

    Fixed in 0:0.20.3-2.rhaos4.11.el8
  135. Upgrade

    Upgrade redhat/containernetworking-plugins to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-5.rhaos4.11.el8
  136. Upgrade

    Upgrade redhat/containers-common to a version that resolves this vulnerability.

    Fixed in 2:1-21.rhaos4.11.el8
  137. Upgrade

    Upgrade redhat/container-selinux to a version that resolves this vulnerability.

    Fixed in 2:2.188.0-1.rhaos4.11.el8
  138. Upgrade

    Upgrade redhat/coreos-installer to a version that resolves this vulnerability.

    Fixed in 0:0.15.0-2.rhaos4.11.el8
  139. Upgrade

    Upgrade redhat/cri-o to a version that resolves this vulnerability.

    Fixed in 0:1.24.1-11.rhaos4.11.gitb0d2ef3.el8
  140. Upgrade

    Upgrade redhat/cri-tools to a version that resolves this vulnerability.

    Fixed in 0:1.24.2-4.1.el8
  141. Upgrade

    Upgrade redhat/criu to a version that resolves this vulnerability.

    Fixed in 0:3.15-4.rhaos4.11.el8
  142. Upgrade

    Upgrade redhat/crun to a version that resolves this vulnerability.

    Fixed in 0:1.4.2-1.rhaos4.11.el8
  143. Upgrade

    Upgrade redhat/fuse-overlayfs to a version that resolves this vulnerability.

    Fixed in 0:1.9-1.rhaos4.11.el8
  144. Upgrade

    Upgrade redhat/haproxy to a version that resolves this vulnerability.

    Fixed in 0:2.2.24-1.el8
  145. Upgrade

    Upgrade redhat/ignition to a version that resolves this vulnerability.

    Fixed in 0:2.14.0-3.rhaos4.11.el8
  146. Upgrade

    Upgrade redhat/kata-containers to a version that resolves this vulnerability.

    Fixed in 0:2.4.2-1.el8
  147. Upgrade

    Upgrade redhat/libslirp to a version that resolves this vulnerability.

    Fixed in 0:4.4.0-2.rhaos4.11.el8
  148. Upgrade

    Upgrade redhat/openshift to a version that resolves this vulnerability.

    Fixed in 0:4.11.0-202207082037.p0.g9546431.assembly.stream.el8
  149. Upgrade

    Upgrade redhat/openshift-ansible to a version that resolves this vulnerability.

    Fixed in 0:4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
  150. Upgrade

    Upgrade redhat/openshift-clients to a version that resolves this vulnerability.

    Fixed in 0:4.11.0-202207291716.p0.g7075089.assembly.stream.el8
  151. Upgrade

    Upgrade redhat/openshift-kuryr to a version that resolves this vulnerability.

    Fixed in 0:4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
  152. Upgrade

    Upgrade redhat/openvswitch2.17 to a version that resolves this vulnerability.

    Fixed in 0:2.17.0-22.el8fd
  153. Upgrade

    Upgrade redhat/ovn22.03 to a version that resolves this vulnerability.

    Fixed in 0:22.03.0-37.el8fd
  154. Upgrade

    Upgrade redhat/ovn22.06 to a version that resolves this vulnerability.

    Fixed in 0:22.06.0-27.el8fd
  155. Upgrade

    Upgrade redhat/podman to a version that resolves this vulnerability.

    Fixed in 2:4.0.2-6.rhaos4.11.el8
  156. Upgrade

    Upgrade redhat/runc to a version that resolves this vulnerability.

    Fixed in 3:1.1.2-1.rhaos4.11.el8
  157. Upgrade

    Upgrade redhat/rust-afterburn to a version that resolves this vulnerability.

    Fixed in 0:5.3.0-1.rhaos4.11.el8
  158. Upgrade

    Upgrade redhat/rust-bootupd to a version that resolves this vulnerability.

    Fixed in 0:0.2.5-3.rhaos4.11.el8
  159. Upgrade

    Upgrade redhat/skopeo to a version that resolves this vulnerability.

    Fixed in 2:1.5.2-3.rhaos4.11.el8
  160. Upgrade

    Upgrade redhat/slirp4netns to a version that resolves this vulnerability.

    Fixed in 0:1.1.8-1.rhaos4.11.el8
  161. Upgrade

    Upgrade redhat/toolbox to a version that resolves this vulnerability.

    Fixed in 0:0.0.9-1.rhaos4.11.el8
  162. Upgrade

    Upgrade redhat/cri-o to a version that resolves this vulnerability.

    Fixed in 0:1.24.3-6.rhaos4.11.gitc4567c0.el8
  163. Upgrade

    Upgrade redhat/cri-tools to a version that resolves this vulnerability.

    Fixed in 0:1.24.2-7.el8
  164. Upgrade

    Upgrade redhat/butane to a version that resolves this vulnerability.

    Fixed in 0:0.16.0-2.rhaos4.12.el8
  165. Upgrade

    Upgrade redhat/ignition to a version that resolves this vulnerability.

    Fixed in 0:2.14.0-5.rhaos4.12.el8
  166. Upgrade

    Upgrade redhat/etcd to a version that resolves this vulnerability.

    Fixed in 0:3.3.23-12.el8
  167. Upgrade

    Upgrade redhat/kubevirt to a version that resolves this vulnerability.

    Fixed in 0:4.12.0-1057.el7
  168. Upgrade

    Upgrade redhat/kubevirt to a version that resolves this vulnerability.

    Fixed in 0:4.12.0-1057.el8
  169. Upgrade

    Upgrade debian/golang-1.19 to a version that resolves this vulnerability.

    Fixed in 1.19.8-2
  170. Upgrade

    Upgrade redhat/golang to a version that resolves this vulnerability.

    Fixed in 1.18.4
  171. Upgrade

    Upgrade redhat/golang to a version that resolves this vulnerability.

    Fixed in 1.17.12
  172. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 1.18.5-1
  173. Upgrade

    Upgrade golang (net/http) to a version that resolves this vulnerability.

    Fixed in 1.17.12
  174. Upgrade

    Upgrade golang (net/http) to a version that resolves this vulnerability.

    Fixed in 1.18.4

Event History

Jul 12, 2022
CVE Published
12:00 AM
Jul 14, 2022
Data Sourced
via Red Hat·08:34 PM
DescriptionSeverityAffected Software
Aug 9, 2022
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
DescriptionWeakness
Aug 10, 2022
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 16, 2022
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Oct 10, 2024
Data Sourced
via Ubuntu·01:15 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·01:16 PM
Description
Nov 3, 2025
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2022-1705?

CVE-2022-1705 is classified as a medium-severity vulnerability.

2

How do I fix CVE-2022-1705?

To mitigate CVE-2022-1705, upgrade to the corrected versions specified in your affected software release.

3

What components are affected by CVE-2022-1705?

CVE-2022-1705 affects various packages such as skupper-cli, libsodium, and openstack-ironic, among others.

4

What type of vulnerability is CVE-2022-1705?

CVE-2022-1705 is a request smuggling vulnerability related to improper handling of Transfer-Encoding headers.

5

Can CVE-2022-1705 be exploited without an intermediary server?

Exploitation of CVE-2022-1705 requires an intermediate server that improperly accepts the invalid Transfer-Encoding header.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203