CVE-2022-2582
2 advisories.
Go/github.com/aws/aws-sdk-go CVE-2022-2582: medium 4.3
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
Action: Upgrade github.com/aws/aws-sdk-go to 1.34.0 or later.
go get github.com/aws/aws-sdk-go@v1.34.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34.0 | - |
Fixed versions
| 1.34.0 |
Sources
- osv: GHSA-6jvc-q2x7-pchv
- https://github.com/google/security-research/security/advisories/GHSA-76wf-9vgp-pj7w
- https://nvd.nist.gov/vuln/detail/CVE-2022-2582
- https://github.com/aws/aws-sdk-go/commit/35fa6ddf45c061e0f08d3a3b5119f8f4da38f6d1
- https://github.com/aws/aws-sdk-go
- https://pkg.go.dev/vuln/GO-2022-0391
CVE-2022-2582 · published · modified · JSON
Go/github.com/aws/aws-sdk-go CVE-2022-2582: unknown
Exposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go
Action: Upgrade github.com/aws/aws-sdk-go to 1.34.0 or later.
go get github.com/aws/aws-sdk-go@v1.34.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34.0 | - |
Fixed versions
| 1.34.0 |
Sources
CVE-2022-2582 · published · modified · JSON