What is RHSA-2022:2216?

RHSA-2022:2216 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.4.1

Which CVE IDs does RHSA-2022:2216 cover?

RHSA-2022:2216 covers the following CVE IDs: CVE-2021-37136, CVE-2021-37137, CVE-2021-43797, CVE-2022-21698. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:2216?

RHSA-2022:2216 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2022:2216MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.4.1

Vendor

Red Hat Product Security

Published

May 11, 2022

Last Modified

July 18, 2026

🔗 CVE IDs covered (4)

CVE-2021-37136 →CVE-2021-37137 →CVE-2021-43797 →CVE-2022-21698 →

📋 Description

CVE-2021-37136 — netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37137 — netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way CVE-2021-43797 — netty: control chars in header names may lead to HTTP request smuggling CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🔗 References (10)

selfhttps://access.redhat.com/errata/RHSA-2022:2216
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2004133
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2004135
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2031958
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2045880
externalhttps://issues.redhat.com/browse/LOG-2437
externalhttps://issues.redhat.com/browse/LOG-2442
externalhttps://issues.redhat.com/browse/LOG-2448
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2216.json