RHSA-2022:6422CriticalCVSS 10.0

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.2 security and bug fixes

Published
September 12, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2022-31129 →CVE-2022-36067 →

📋 Description

CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS CVE-2022-36067 — vm2: Sandbox Escape in vm2

🎯 Affected products146

  • multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:1594a65737793fb790c7cd3b034c0ffa88106e2020d4826a6931f853430c28b9_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:3a69e4ccd7e9fcbf75aa8511da30f4c948ff2c8ebcb9c8fc216fe6d9243a06e2_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:824ab7d7ef413789ad3d443237bc7e797ad9098a5f86c11ea4b12db42728344d_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:897dea5f15747a7956ccec476b66610de25c8d346064b4cc57dc7d8282ea1cb0_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:3c9407b09f0ac59a617a61b850b75271b1d0a917a516f81635989965149a1e5b_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:6b14352a9ce766be2ac7012db5cf78e7f2758182d9c207f36faed3645f68b441_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:6e9778293949c53f779f1a249b13c1ec2a200c27cf84e86d7ac16e88085651a5_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:fa035a841a68e0ef06e2913a2ca1637681ceebf57e3e5fe4dd02630f741bfdfd_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:60928fed51b56e78ae2b5711a5a3592a73e7fe472b847e4886173462b9122795_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:64653bebafbf622e94fc86e22c4bd78f30210600be80aba9c3c1db12b34d31ad_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:6dffc20353fdba966bf939cb9f75f540f08890eb4aa1a30b50f4484ae96466c5_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:862da080ee97741d00b1ef8a68f6c2d677b38ce55135c68525fada5638c177ea_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:5e77a879b0046e8345abc81fc0ccb3e6ac5f25be187a21616e078a09143ff83b_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:f7094431b53986fd489e9222d74a712b799fbdf12b19ff315199d44e1dc5fc62_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:34613f3adf2eca8e43d1d8e83c0268e2759da125c370ddc395f5fcc8ebd991ec_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:5ad301fb287917b2d8bef9b097361d2e3c2ab902829c4834de4803f7ae0bba5f_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:eaa948917ee410768d443bffa00d31b64355e873d392e3c18154cfe0bdba2538_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:71e2abb8cb1edeb810780493216bdb4bc66be07e3649e0c098368610abda56ea_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:8306c0022b9f0dc8439e8a65fde641c65ac75a77a0ff92566a98fb1fc0a14cb2_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:c07291f97cc591cc822d432db50e2e24c0ff91ebf539fcda6abefa66b66f0227_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:0c848dff350580a2924354e61b3e1c544dfdc12a3052103dfcc4d3a9cc65006f_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:8e29980f687abbcf4feb43e45d94462a0cfeccb1b7a94f3622728944e9a14393_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:9f610cfbb173f65e8729448ea84f28c4b49c1fcdd7cc5492aede1df5f02743bf_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:f1eb4646ba47f0884476a9918f41bfa621596b3a1902cfb2d0adde816b639876_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:2261f4dd6d131ab238abdda7b63ae49b25b735252e240e236ad266a1a7c81171_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:2de9509205008cc97030188becdee79de44c0cb297497cf9b55f5a419f7207ab_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:77bef36732e8b907df8203db4ca35e8e3d826dd7f22d29c24b7acf5a657047ea_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:9f746676a50e6b21b12eef9d715b99cb698abc83b551cf9f65775badac87b882_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/cluster-api-provider-agent-rhel8@sha256:2c0c4c096a00a7c928db66418550a11a714e573d1aea6236304557aee65414b9_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • +116 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/multicluster_engine/index#installing-while-connected-online Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)