🛡️ ALSA-2023:2758 — aardvark-dns (CVE-2022-1705 +13 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
podman: symlink exchange attack in podman export volume (CVE-2023-0778)
golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)
golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Affected software

ALSA-2023:2758 is recorded against 34 packages.

aardvark-dns (fixed in 2:1.5.0-2.module_el8.8.0+3470+252b1910)
buildah (fixed in 1:1.29.1-1.module_el8.8.0+3470+252b1910)
buildah-tests (fixed in 1:1.29.1-1.module_el8.8.0+3470+252b1910)
cockpit-podman (fixed in 63.1-1.module_el8.8.0+3557+7ba9cc13)
conmon (fixed in 3:2.1.6-1.module_el8.8.0+3470+252b1910)
container-selinux (fixed in 2:2.205.0-2.module_el8.8.0+3557+7ba9cc13)
containernetworking-plugins (fixed in 1:1.2.0-1.module_el8.8.0+3470+252b1910)
containers-common (fixed in 2:1-63.module_el8.8.0+3568+e8578284)
crit (fixed in 3.15-3.module_el8.7.0+3407+95aa0ca9)
criu (fixed in 3.15-3.module_el8.7.0+3407+95aa0ca9)
criu-devel (fixed in 3.15-3.module_el8.7.0+3407+95aa0ca9)
criu-libs (fixed in 3.15-3.module_el8.7.0+3407+95aa0ca9)
crun (fixed in 1.8.1-2.module_el8.8.0+3568+e8578284)
fuse-overlayfs (fixed in 1.10-1.module_el8.8.0+3470+252b1910)
libslirp (fixed in 4.4.0-1.module_el8.7.0+3407+95aa0ca9)
libslirp-devel (fixed in 4.4.0-1.module_el8.7.0+3407+95aa0ca9)
netavark (fixed in 2:1.5.0-4.module_el8.8.0+3470+252b1910)
oci-seccomp-bpf-hook (fixed in 1.2.8-1.module_el8.8.0+3470+252b1910)
podman (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
podman-catatonit (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
podman-docker (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
podman-gvproxy (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
podman-plugins (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
podman-remote (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)

Show the remaining 10 packages

podman-tests (fixed in 3:4.4.1-8.module_el8.8.0+3568+e8578284)
python3-criu (fixed in 3.15-3.module_el8.7.0+3407+95aa0ca9)
python3-podman (fixed in 4.4.1-1.module_el8.8.0+3470+252b1910)
runc (fixed in 1:1.1.4-1.module_el8.7.0+3407+95aa0ca9)
skopeo (fixed in 2:1.11.2-0.2.module_el8.8.0+3470+252b1910)
skopeo-tests (fixed in 2:1.11.2-0.2.module_el8.8.0+3470+252b1910)
slirp4netns (fixed in 1.2.0-2.module_el8.7.0+3407+95aa0ca9)
toolbox (fixed in 0.0.99.3-7.module_el8.8.0+3470+252b1910)
toolbox-tests (fixed in 0.0.99.3-7.module_el8.8.0+3470+252b1910)
udica (fixed in 0.2.6-20.module_el8.8.0+3470+252b1910)

Timeline and source

Published on 16 May 2023 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

aardvark-dns has other advisories on record. If you are patching this one, these are worth checking on the same host:

RHSA-2026:51288 (published 7 Aug 2026)
RHSA-2026:49944 (published 5 Aug 2026)
ALSA-2026:38504 (published 13 Jul 2026)
RHSA-2026:38504 (published 13 Jul 2026)
RLSA-2026:38504 (published 13 Jul 2026)
RLSA-2026:36782 (published 10 Jul 2026)
RHSA-2026:36782 (published 9 Jul 2026)
ALSA-2026:36782 (published 8 Jul 2026)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2023-05-16

Updated 2026-08-20

Modified 2026-02-04

Fix URL N/A

Affected Packages

Software	From version	Fixed in
aardvark-dns	—	2:1.5.0-2.module_el8.8.0+3470+252b1910
buildah	—	1:1.29.1-1.module_el8.8.0+3470+252b1910
buildah-tests	—	1:1.29.1-1.module_el8.8.0+3470+252b1910
cockpit-podman	—	63.1-1.module_el8.8.0+3557+7ba9cc13
conmon	—	3:2.1.6-1.module_el8.8.0+3470+252b1910
container-selinux	—	2:2.205.0-2.module_el8.8.0+3557+7ba9cc13
containernetworking-plugins	—	1:1.2.0-1.module_el8.8.0+3470+252b1910
containers-common	—	2:1-63.module_el8.8.0+3568+e8578284
crit	—	3.15-3.module_el8.7.0+3407+95aa0ca9
criu	—	3.15-3.module_el8.7.0+3407+95aa0ca9
criu-devel	—	3.15-3.module_el8.7.0+3407+95aa0ca9
criu-libs	—	3.15-3.module_el8.7.0+3407+95aa0ca9
crun	—	1.8.1-2.module_el8.8.0+3568+e8578284
fuse-overlayfs	—	1.10-1.module_el8.8.0+3470+252b1910
libslirp	—	4.4.0-1.module_el8.7.0+3407+95aa0ca9
libslirp-devel	—	4.4.0-1.module_el8.7.0+3407+95aa0ca9
netavark	—	2:1.5.0-4.module_el8.8.0+3470+252b1910
oci-seccomp-bpf-hook	—	1.2.8-1.module_el8.8.0+3470+252b1910
podman	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-catatonit	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-docker	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-gvproxy	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-plugins	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-remote	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-tests	—	3:4.4.1-8.module_el8.8.0+3568+e8578284
python3-criu	—	3.15-3.module_el8.7.0+3407+95aa0ca9
python3-podman	—	4.4.1-1.module_el8.8.0+3470+252b1910
runc	—	1:1.1.4-1.module_el8.7.0+3407+95aa0ca9
skopeo	—	2:1.11.2-0.2.module_el8.8.0+3470+252b1910
skopeo-tests	—	2:1.11.2-0.2.module_el8.8.0+3470+252b1910
slirp4netns	—	1.2.0-2.module_el8.7.0+3407+95aa0ca9
toolbox	—	0.0.99.3-7.module_el8.8.0+3470+252b1910
toolbox-tests	—	0.0.99.3-7.module_el8.8.0+3470+252b1910
udica	—	0.2.6-20.module_el8.8.0+3470+252b1910

References

ADVISORY https://access.redhat.com/errata/RHSA-2023:2758

REPORT https://access.redhat.com/security/cve/CVE-2022-1705

REPORT https://access.redhat.com/security/cve/CVE-2022-1962

REPORT https://access.redhat.com/security/cve/CVE-2022-27664

REPORT https://access.redhat.com/security/cve/CVE-2022-28131

REPORT https://access.redhat.com/security/cve/CVE-2022-30629

REPORT https://access.redhat.com/security/cve/CVE-2022-30630

REPORT https://access.redhat.com/security/cve/CVE-2022-30631

REPORT https://access.redhat.com/security/cve/CVE-2022-30632

REPORT https://access.redhat.com/security/cve/CVE-2022-30633

REPORT https://access.redhat.com/security/cve/CVE-2022-30635

REPORT https://access.redhat.com/security/cve/CVE-2022-32148

REPORT https://access.redhat.com/security/cve/CVE-2022-32189

REPORT https://access.redhat.com/security/cve/CVE-2022-41717

REPORT https://access.redhat.com/security/cve/CVE-2023-0778

REPORT https://bugzilla.redhat.com/2092793

REPORT https://bugzilla.redhat.com/2107342

REPORT https://bugzilla.redhat.com/2107371

REPORT https://bugzilla.redhat.com/2107374

REPORT https://bugzilla.redhat.com/2107376

REPORT https://bugzilla.redhat.com/2107383

REPORT https://bugzilla.redhat.com/2107386

REPORT https://bugzilla.redhat.com/2107388

REPORT https://bugzilla.redhat.com/2107390

REPORT https://bugzilla.redhat.com/2107392

REPORT https://bugzilla.redhat.com/2113814

REPORT https://bugzilla.redhat.com/2124669

REPORT https://bugzilla.redhat.com/2161274

REPORT https://bugzilla.redhat.com/2168256

ADVISORY https://errata.almalinux.org/8/ALSA-2023-2758.html

🔗 NVD 🔗 Mitre

Similar Threats

Unknown ALSA-2024:10289
Unknown ALSA-2024:4246
Unknown ALSA-2024:3968
Unknown ALSA-2024:3254
Unknown ALSA-2024:2084

Free Vulnerability Check

Is your site affected by ALSA-2023:2758?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against ALSA-2023:2758 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ ALSA-2023:2758 — aardvark-dns (CVE-2022-1705 +13 more)

Description

Affected software

Timeline and source

References

Other advisories for this package

Is your site affected by ALSA-2023:2758?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe