8.7
High
CVE-2026-35469 spdystream is a Go library for multiplexing streams over SPDY connections
Description
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| spdystream 0.5 | earliest → < 0.5.1 | 0.5.1 |
| Red Hat Advanced Cluster Management for Kubernetes 2.13 1778302921 | earliest → < 1778302921 | 1778302921 |
| Red Hat Advanced Cluster Security for Kubernetes 4.10 1777976489 | earliest → < 1777976489 | 1777976489 |
| Red Hat Advanced Cluster Security for Kubernetes 4.8 1777307791 | earliest → < 1777307791 | 1777307791 |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 1777986630 | earliest → < 1777986630 | 1777986630 |
| Red Hat Container Native Virtualization 4.16 1782184329 | earliest → < 1782184329 | 1782184329 |
| Red Hat Container Native Virtualization 4.17 1782358244 | earliest → < 1782358244 | 1782358244 |
| Red Hat Container Native Virtualization 4.19 1781590993 | earliest → < 1781590993 | 1781590993 |
| Red Hat Container Native Virtualization 4.20 1781838712 | earliest → < 1781838712 | 1781838712 |
Show the 48 other branches Hide the 48 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Container Native Virtualization 4.21 1782012918 | earliest → < 1782012918 | 1782012918 |
| Red Hat Container Native Virtualization 4.22 1781852593 | earliest → < 1781852593 | 1781852593 |
| Red Hat OpenShift Container Platform 4.12 1784054795 | earliest → < 1784054795 | 1784054795 |
| Red Hat OpenShift Container Platform 4.13 1784055726 | earliest → < 1784055726 | 1784055726 |
| Red Hat OpenShift Container Platform 4.14 1784582377 | earliest → < 1784582377 | 1784582377 |
| Red Hat OpenShift Container Platform 4.15 1784576933 | earliest → < 1784576933 | 1784576933 |
| Red Hat OpenShift Container Platform 4.16 1782904234 | earliest → < 1782904234 | 1782904234 |
| Red Hat OpenShift Container Platform 4.17 1787560246 | earliest → < 1787560246 | 1787560246 |
| Red Hat OpenShift Container Platform 4.18 1785655390 | earliest → < 1785655390 | 1785655390 |
| Red Hat OpenShift Container Platform 4.19 1785600792 | earliest → < 1785600792 | 1785600792 |
| Red Hat OpenShift Container Platform 4.20 1785857530 | earliest → < 1785857530 | 1785857530 |
| Red Hat OpenShift Container Platform 4.21 1788278260 | earliest → < 1788278260 | 1788278260 |
| Red Hat OpenShift Container Platform 4.22 1784702398 | earliest → < 1784702398 | 1784702398 |
| multicluster engine for Kubernetes 2.10 1786548918 | earliest → < 1786548918 | 1786548918 |
| multicluster engine for Kubernetes 2.11 1778892370 | earliest → < 1778892370 | 1778892370 |
| multicluster engine for Kubernetes 2.8 1778288646 | earliest → < 1778288646 | 1778288646 |
| cert-manager Operator for Red Hat OpenShift | Versions not published | |
| Dynamic Accelerator Slicer Operator for Red Hat OpenShift | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat Edge Manager 1 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift for Windows Containers | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| External Secrets Operator for Red Hat OpenShift | Versions not published | |
| Logical Volume Manager Storage | Versions not published | |
| Red Hat Advanced Cluster Security 4 | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published | |
| Red Hat OpenShift distributed tracing 3 | Versions not published | |
| Zero Trust Workload Identity Manager | Versions not published | |
| Red Hat Container Native Virtualization 4.15 1783042900 | earliest → < 1783042900 | 1783042900 |
| RHEM 1.0 for RHEL 9 | Versions not published | |
| Red Hat Openshift Data Foundation 4.22 1782934284 | earliest → < 1782934284 | 1782934284 |
| RHEM 1.1 for RHEL 10 | Versions not published | |
| RHEM 1.1 for RHEL 9 | Versions not published | |
| multicluster engine for Kubernetes 2.1 1786548918 | earliest → < 1786548918 | 1786548918 |
| Red Hat Advanced Cluster Security 4.8 1777307791 | earliest → < 1777307791 | 1777307791 |
| Red Hat Advanced Cluster Security 4.9 1777986630 | earliest → < 1777986630 | 1777986630 |
| Red Hat Container Native Virtualization 4.2 1781838712 | earliest → < 1781838712 | 1781838712 |
| Red Hat OpenShift Container Platform 4.2 1785857530 | earliest → < 1785857530 | 1785857530 |
| multicluster engine for Kubernetes 2.11.0 1778892370 | earliest → < 1778892370 | 1778892370 |
| Red Hat Container Native Virtualization 4.13 1786346620 | earliest → < 1786346620 | 1786346620 |
| Red Hat Openshift Data Foundation 4.18 1786706880 | earliest → < 1786706880 | 1786706880 |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Cluster Observability Operator 1.5.2 1787593637 | earliest → < 1787593637 | 1787593637 |
| Cluster Observability Operator 1.5.0 1787593637 | earliest → < 1787593637 | 1787593637 |
| Logging Subsystem for Red Hat OpenShift 6.6 1788439505 | earliest → < 1788439505 | 1788439505 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified