Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-32149

21
FAUCET Score

CVE-2022-32149 is a denial-of-service vulnerability affecting the golang text package, where a specially crafted Accept-Language header can cause ParseAcceptLanguage to consume significant processing time. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity that can lead to a complete loss of availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 0.3.8CPE matchmatch criteria
cpe:2.3:a:golang:text:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.49%
Probability of exploitation in next 30 days
EPSS Percentile
71.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0149 is in the 53rd percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (148)

gopatch availablevia ghsa
Product: golang.org/x/textFixed in: 0.3.8
microsoftpatch availablevia msrc
Product: 19713-17086Fixed in: 1.4.0-22
microsoftpatch availablevia msrc
Product: 17197-17086Fixed in: 1.4.0-22
microsoftpatch availablevia msrc
Product: 19977-17086Fixed in: 8.4.0-21
microsoftpatch availablevia msrc
Product: 19821-17086Fixed in: 1.55.0-20
microsoftpatch availablevia msrc
Product: 19967-17086Fixed in: 2.13.0-22
microsoftpatch availablevia msrc
Product: 17133-17086Fixed in: 2.13.0-22
microsoftpatch availablevia msrc
Product: 20290-17086Fixed in: 3.4.1-1
microsoftpatch availablevia msrc
Product: 19833-17086Fixed in: 2.6.1-17
microsoftpatch availablevia msrc
Product: 19782-17086Fixed in: 0.59.0-20
microsoftpatch availablevia msrc
Product: 20299-17086Fixed in: 0.8.17-2
microsoftpatch availablevia msrc
Product: 19912-17086Fixed in: 1.3.2-19
microsoftpatch availablevia msrc
Product: 18201-17086Fixed in: 1.3.2-19
microsoftpatch availablevia msrc
Product: 19959-17084Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: 18189-17084Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: 20086-17084Fixed in: 4.0.2-1
microsoftpatch availablevia msrc
Product: 18823-17084Fixed in: 4.0.2-1
microsoftpatch availablevia msrc
Product: 20307-17084Fixed in: 0.8.15-1
microsoftpatch availablevia msrc
Product: 20235-17084Fixed in: 3.7.0-1
microsoftpatch availablevia msrc
Product: 18528-17084Fixed in: 3.7.0-1
microsoftpatch availablevia msrc
Product: 19777-17086Fixed in: 1.22.3-8
microsoftpatch availablevia msrc
Product: 18820-17084Fixed in: 1.6.1-4
microsoftpatch availablevia msrc
Product: 18825-17084Fixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: 17505-17084Fixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: 17761-17084Fixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: 19877-17084Fixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: 19836-17086Fixed in: 2.4.0-23
microsoftpatch availablevia msrc
Product: 19792-17086Fixed in: 20210626-6
microsoftpatch availablevia msrc
Product: 19957-17086Fixed in: 0.10.0-14
microsoftpatch availablevia msrc
Product: 20308-17086Fixed in: 3.6.2-2
microsoftpatch availablevia msrc
Product: 20408-17086Fixed in: 1.0.1-20
microsoftpatch availablevia msrc
Product: 18822-17084Fixed in: 0.8.15-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 2.13.0-22
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 2.13.0-22
microsoftpatch availablevia msrc
Product: cbl2 application-gateway-kubernetes-ingress 1.4.0-25 on CBL Mariner 2.0Fixed in: 1.4.0-22
microsoftpatch availablevia msrc
Product: cbl2 cf-cli 8.4.0-24 on CBL Mariner 2.0Fixed in: 8.4.0-21
microsoftpatch availablevia msrc
Product: cbl2 containerized-data-importer 1.55.0-23 on CBL Mariner 2.0Fixed in: 1.55.0-20
microsoftpatch availablevia msrc
Product: cbl2 gh 2.13.0-24 on CBL Mariner 2.0Fixed in: 2.13.0-22
microsoftpatch availablevia msrc
Product: cbl2 git-lfs 3.1.4-17 on CBL Mariner 2.0Fixed in: 3.4.1-1
microsoftpatch availablevia msrc
Product: cbl2 influxdb 2.6.1-22 on CBL Mariner 2.0Fixed in: 2.6.1-17
microsoftpatch availablevia msrc
Product: cbl2 kubevirt 0.59.0-28 on CBL Mariner 2.0Fixed in: 0.59.0-20
microsoftpatch availablevia msrc
Product: cbl2 node-problem-detector 0.8.10-20 on CBL Mariner 2.0Fixed in: 0.8.17-2
microsoftpatch availablevia msrc
Product: cbl2 terraform 1.3.2-25 on CBL Mariner 2.0Fixed in: 1.3.2-19
microsoftpatch availablevia msrc
Product: azl3 kubevirt 0.59.0-14 on Azure Linux 3.0Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: azl3 kubevirt 1.2.0-1 on Azure Linux 3.0Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: azl3 multus 3.8-13 on Azure Linux 3.0Fixed in: 4.0.2-1
microsoftpatch availablevia msrc
Product: azl3 multus 4.0.2-1 on Azure Linux 3.0Fixed in: 4.0.2-1
microsoftpatch availablevia msrc
Product: azl3 node-problem-detector 0.8.10-18 on Azure Linux 3.0Fixed in: 0.8.15-1
microsoftpatch availablevia msrc
Product: azl3 node-problem-detector 0.8.15-1 on Azure Linux 3.0Fixed in: 0.8.15-1
microsoftpatch availablevia msrc
Product: azl3 sriov-network-device-plugin 3.5.1-3 on Azure Linux 3.0Fixed in: 3.7.0-1
microsoftpatch availablevia msrc
Product: azl3 sriov-network-device-plugin 3.7.0-1 on Azure Linux 3.0Fixed in: 3.7.0-1
microsoftpatch availablevia msrc
Product: cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0Fixed in: 1.22.3-8
microsoftpatch availablevia msrc
Product: azl3 containernetworking-plugins 1.6.1-4 on Azure Linux 3.0Fixed in: 1.6.1-4
microsoftpatch availablevia msrc
Product: azl3 cni 1.1.2-3 on Azure Linux 3.0Fixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: azl3 cni 1.1.2-4 on Azure Linux 3.0Fixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: azl3 keda 2.14.0-1 on Azure Linux 3.0Fixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: azl3 keda 2.4.0-15 on Azure Linux 3.0Fixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: cbl2 keda 2.4.0-29 on CBL Mariner 2.0Fixed in: 2.4.0-23
microsoftpatch availablevia msrc
Product: cbl2 libcontainers-common 20210626-7 on CBL Mariner 2.0Fixed in: 20210626-6
microsoftpatch availablevia msrc
Product: cbl2 prometheus-adapter 0.10.0-17 on CBL Mariner 2.0Fixed in: 0.10.0-14
microsoftpatch availablevia msrc
Product: cbl2 sriov-network-device-plugin 3.5.1-3 on CBL Mariner 2.0Fixed in: 3.6.2-2
microsoftpatch availablevia msrc
Product: cbl2 cni 1.0.1-19 on CBL Mariner 2.0Fixed in: 1.0.1-20
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.4.0-22
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.55.0-20
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.4.0-22
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.55.0-20
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.4.0-23
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 8.4.0-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.55.0-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 3.4.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.4.0-23
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 8.4.0-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.55.0-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 3.4.1-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 4.0.2-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.1.2-3
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 2.14.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 4.0.2-1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: container-tools:rhel8-8080020240422101606.0f77c1b7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-rhel8:v1.7.7-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.12Fixed in: podman-3:4.2.0-6.1.rhaos4.12.el8
View patch
redhatpatch availablevia redhat_api
Product: RHEL-7-CNV-4.13Fixed in: kubevirt-0:4.13.0-1469.el7
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8-CNV-4.13Fixed in: kubevirt-0:4.13.0-1469.el8
View patch
redhatpatch availablevia redhat_api
Product: RHEL-9-CNV-4.13Fixed in: kubevirt-0:4.13.0-1469.el9
View patch
redhatpatch availablevia redhat_api
Product: RHEL-9-CNV-4.13Fixed in: container-native-virtualization/virt-api-rhel9:v4.13.0-358
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.5-RHEL-8Fixed in: openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-303
View patch
redhatpatch availablevia redhat_api
Product: Logging subsystem for Red Hat OpenShift 5.4Fixed in: openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-300
View patch
redhatpatch availablevia redhat_api
Product: OADP-1.0-RHEL-8Fixed in: oadp/oadp-velero-rhel8:1.0.7-5
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Custom Metrics Autoscaler 2Fixed in: custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8:2.8.2-143
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Developer Tools and Services for OCP 4.9Fixed in: ocp-tools-4/service-binding-operator-bundle:v1.3.1-7
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Developer Tools and Services for OCP 4.9Fixed in: ocp-tools-4/service-binding-rhel8-operator:v1.3.1-5
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Logging 5.3Fixed in: openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-302
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: container-tools:rhel8-8060020240413110723.3b538bd8
View patch
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/lighthouse-agent-rhel8
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/lighthouse-coredns-rhel8
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:rhel8/podman
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:3.0/podman
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform Assisted Installer 1Fixed in: rhai-tech-preview/assisted-installer-rhel8
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/cephcsi-rhel9
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8
redhatno patchvia redhat_api
Product: Self Node Remediation OperatorFixed in: workload-availability/self-node-remediation-rhel8-operator
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:4.0/podman
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/cert-manager-webhook-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/config-policy-controller-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/discovery-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/gatekeeper-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/governance-policy-propagator-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multiclusterhub-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/registration-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/subctl-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-addon-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-gateway-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-globalnet-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-networkplugin-syncer-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-route-agent-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/thanos-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/work-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: podman
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: ansible-service-broker
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-enterprise-service-catalog
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-openshift
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-openshift-descheduler
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-openshift-dockerregistry
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-openshift-service-idler
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: atomic-openshift-web-console
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: openshift-enterprise-autoheal
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 3.11Fixed in: openshift-enterprise-cluster-capacity
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: atomic-openshift-service-idler
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift
redhatend of lifevia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: odo
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 2Fixed in: openshift-golang-builder-container
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: acm-search-indexer-container
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-cluster-proxy-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acmesolver-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-search-v2-api-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/agent-service-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/assisted-installer-agent-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/assisted-installer-reporter-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/assisted-installer-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/cainjector-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/cert-manager-controller-rhel8

Vendor Advisories (6)

microsoft2024-Dec/CVE-2022-32149

CVE-2022-32149

Dec 10, 2024
microsoft2024-Nov/CVE-2022-32149

CVE-2022-32149

Nov 12, 2024
microsoft2024-Oct/CVE-2022-32149

CVE-2022-32149

Oct 8, 2024
goGHSA-69ch-w2m2-3vjphigh

golang.org/x/text/language Denial of service via crafted Accept-Language header

Oct 14, 2022
microsoft2022-Oct/CVE-2022-32149

Denial of service via crafted Accept-Language header in golang.org/x/text/language

Oct 11, 2022
redhatCVE-2022-32149Moderate

golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags

Oct 11, 2022

References

security.netapp.com / advisory/ntap-20230203-0006
go.dev / cl/442235
Vendor Advisory
go.dev / issue/56152
Issue TrackingThird Party Advisory
groups.google.com / g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ
Mailing ListThird Party Advisory
pkg.go.dev / vuln/GO-2022-1059
Vendor Advisory