Aller au contenu
en Se connecter
5.9 Moyenne

CVE-2026-88763 A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure…

Description

A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Service Interconnect 2 Versions non publiées
Service Interconnect 2 for RHEL 8 Versions non publiées
Service Interconnect 2 for RHEL 9 3.5 premières → < 3.5.3-1 3.5.3-1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Service Interconnect 2

Les 13 CVE de Red Hat Service Interconnect 2 →
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée
Suivre cette CVE