Skip to content
fr Sign in
5.9 Medium

CVE-2026-88763 A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure…

Description

A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.

Affected products and versions

Product Affected versions Fixed in
Red Hat Service Interconnect 2 Versions not published
Service Interconnect 2 for RHEL 8 Versions not published
Service Interconnect 2 for RHEL 9 3.5 earliest → < 3.5.3-1 3.5.3-1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Service Interconnect 2

The 13 CVEs of Red Hat Service Interconnect 2 →
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 High
Track this CVE