7.5
Élevée
CVE-2026-49329 A flaw was found in openshift/oauth-server
Description
A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-' characters but the internal BCP 47 scanner aliases '_' to '-' after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using '_' separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.21 1790707106 | premières → < 1790707106 | 1790707106 |
| Red Hat OpenShift Container Platform 4.22 1790713150 | premières → < 1790713150 | 1790713150 |
| Red Hat OpenShift Container Platform 4.20 1790702087 | premières → < 1790702087 | 1790702087 |
| Red Hat OpenShift Container Platform 4.19 1790611633 | premières → < 1790611633 | 1790611633 |
| Red Hat OpenShift Container Platform 4.18 1790882323 | premières → < 1790882323 | 1790882323 |
| Red Hat OpenShift Container Platform 4.14 1791839120 | premières → < 1791839120 | 1791839120 |
| Red Hat OpenShift Container Platform 4.15 1791598539 | premières → < 1791598539 | 1791598539 |
| Red Hat OpenShift Container Platform 4.16 1792883889 | premières → < 1792883889 | 1792883889 |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 5 | Versions non publiées |
Références
- RHSA-2026:74380 access.redhat.com
- RHSA-2026:74383 access.redhat.com
- RHSA-2026:74429 access.redhat.com
- RHSA-2026:74434 access.redhat.com
- RHSA-2026:79039 access.redhat.com
- RHSA-2026:82785 access.redhat.com
- RHSA-2026:82813 access.redhat.com
- RHSA-2026:89715 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2483248 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift Container Platform 4
Les 629 CVE de Red Hat OpenShift Container Platform 4 →
CVE-2026-82976
Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret
7.1
Élevée
CVE-2026-120831
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
6.5
Moyenne
CVE-2026-120830
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
7.4
Élevée
CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
7.5
Élevée