# CVE-2022-31080: GO-2022-0512 - DoS in KubeEdge's Websocket Client in package Viaduct in github.com/kubeedge/kubeedge

Source: https://junglewise.ai/threats/cve-2022-31080-dos-in-kubeedge-s-websocket-client-in-package-viaduct  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-08-21  
License: CC BY 4.0 with a link back

CVE-2022-31080 · Severity: low · CVSS 3.1 · Published 2024-08-21

DoS in KubeEdge's Websocket Client in package Viaduct in github.com/kubeedge/kubeedge

Technologies: [github.com/kubeedge/kubeedge (Go)](https://junglewise.ai/threats/technologies/github-com-kubeedge-kubeedge). Vendors: [Go](https://junglewise.ai/threats/vendors/go).

## Quick answers

**Is CVE-2022-31080 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2022-31080 being exploited in the wild.

**How severe is CVE-2022-31080?** Low severity, with a CVSS score of 3.1, published 21 August 2024.

**Which products and versions are affected?** github.com/kubeedge/kubeedge (Go) SEMVER:introduced=0,fixed=1.9.4,introduced=1.10.0,fixed=1.10.2,introduced=1.11.0,fixed=1.11.1, SEMVER:introduced=1.11.0,fixed=1.11.1.

**Is there a fix for CVE-2022-31080?** Yes. github.com/kubeedge/kubeedge (Go): upgrade to 1.11.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected by CVE-2022-31080?** Check whether you run github.com/kubeedge/kubeedge (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/kubeedge/kubeedge (Go): upgrade to 1.11.1 or later

  ```sh
  go get github.com/kubeedge/kubeedge@v1.11.1
  ```


## Affected products

- github.com/kubeedge/kubeedge (Go) SEMVER:introduced=0,fixed=1.9.4,introduced=1.10.0,fixed=1.10.2,introduced=1.11.0,fixed=1.11.1, SEMVER:introduced=1.11.0,fixed=1.11.1

## Identifiers

- CVE-2022-31080
- GHSA-6wvc-6pww-qr4r
- GO-2022-0512

## Related threats

- [KubeEdge keadm path traversal in DecompressTarGz](https://junglewise.ai/threats/cve-2026-62369-kubeedge-keadm-path-traversal-in-decompresstargz)
- [KubeEdge ConfigUpdateJob command injection in updateFields](https://junglewise.ai/threats/cve-2026-62182-kubeedge-configupdatejob-command-injection-in-updatefields)
- [KubeEdge command injection in NodeUpgradeJob via v1alpha2 API](https://junglewise.ai/threats/cve-2026-62371-kubeedge-command-injection-in-nodeupgradejob-via-v1alpha2-api)
- [KubeEdge CloudHub unbounded buffer allocation in viaduct packer](https://junglewise.ai/threats/cve-2026-62370-kubeedge-cloudhub-unbounded-buffer-allocation-in-viaduct-packer)
- [GO-2022-0511 - KubeEdge Cloud Stream and Edge Stream DoS from large stream message in github.com/kubeedge/kubeedge](https://junglewise.ai/threats/cve-2022-31079-kubeedge-cloud-stream-and-edge-stream-dos-from-large-stream)