{"schema_version":"1","data":[{"id":24339,"advisory_id":"7a532bf6-71db-480b-b3ee-60c4eb13d121","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-29499","source_published_at":"2023-09-14T19:06:17.81+00:00","published_at":"2026-10-25T06:34:22.692769+00:00","extraction_method":"structured","technologies":["core-cve","extra-packages-for-enterprise-linux","fedora-37","fedora-38","glib2","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-29499"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gvariant offset table entry size is not checked in is_normal()","summary":"A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.","evidence":"cve:CVE-2023-29499","products":[{"name":{"value":"glib2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Extra Packages for Enterprise Linux","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 37","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 38","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 38","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 37","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-29499","aliases":["CVE-2023-29499"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glib2","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux","packageName":"glib","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 37","packageName":"mingw-glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 38","packageName":"glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 38","packageName":"mingw-glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 37","packageName":"glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T23:03:56.001Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-29499","https://bugzilla.redhat.com/show_bug.cgi?id=2211828","https://gitlab.gnome.org/GNOME/glib/-/issues/2794","https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html","https://security.netapp.com/advisory/ntap-20231103-0001/","https://security.gentoo.org/glsa/202311-18"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-29499","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211828","name":"RHBZ#2211828","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/glib/-/issues/2794","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231103-0001/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202311-18","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T14:07:46.408Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-29499","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-18T15:23:31.856597Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-18T15:23:36.882Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T23:03:56.001Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-11-27T14:06:16.355Z"}}},"related_cves":[{"value":"CVE-2023-29499","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24297,"advisory_id":"c8e526ec-b687-43a8-aa37-e8ed1b9998f1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6779","source_published_at":"2024-01-31T14:07:41.967+00:00","published_at":"2026-10-25T06:33:09.974917+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6779"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","summary":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6779","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6779","aliases":["CVE-2023-6779"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:19.456Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6779","https://bugzilla.redhat.com/show_bug.cgi?id=2254395","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240223-0006/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6779","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254395","name":"RHBZ#2254395","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240223-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:42:07.403Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6779","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-13T16:08:30.700931Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-13T16:08:42.227Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:19.456Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-23T16:05:57.859Z"}}},"related_cves":[{"value":"CVE-2023-6779","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24296,"advisory_id":"da548256-9dbb-4ae2-b319-1023e631fa7c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6606","source_published_at":"2023-12-08T16:58:08.746+00:00","published_at":"2026-10-25T06:33:09.364017+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-8-8-extended-update-support","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-extended-update-support","red-hat-virtualization-4-for-red-hat-enterprise-linux-8","rhol-5-8-rhel-9"],"cve_ids":["CVE-2023-6606"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: out-of-bounds read vulnerability in smbcalcsize","summary":"An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.","evidence":"cve:CVE-2023-6606","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6606","aliases":["CVE-2023-6606"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::nfv","cpe:/a:redhat:enterprise_linux:8::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.18.1.rt7.320.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.18.1.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/a:redhat:rhel_eus:8.6::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-372.95.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.8::baseos","cpe:/a:redhat:rhel_eus:8.8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-477.51.1.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.24.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.24.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::crb","cpe:/o:redhat:rhel_eus:9.2::baseos","cpe:/a:redhat:rhel_eus:9.2::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-284.52.1.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::nfv","cpe:/a:redhat:rhel_eus:9.2::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-284.52.1.rt14.337.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/a:redhat:rhel_eus:8.6::crb"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-372.95.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-22","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/cluster-logging-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/cluster-logging-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v6.8.1-407","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch6-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-19","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v1.0.0-479","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-proxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-7","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.4.0-247","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/eventrouter-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-5","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/fluentd-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v1.1.0-227","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/log-file-metric-exporter-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.1-470","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-curator5-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v2.9.6-14","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-loki-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-2","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-view-plugin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-24","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/loki-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/loki-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.1.0-525","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/lokistack-gateway-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.1.0-224","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/opa-openshift-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.28.1-56","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/vector-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:17.978Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:0723","https://access.redhat.com/errata/RHSA-2024:0725","https://access.redhat.com/errata/RHSA-2024:0881","https://access.redhat.com/errata/RHSA-2024:0897","https://access.redhat.com/errata/RHSA-2024:1188","https://access.redhat.com/errata/RHSA-2024:1248","https://access.redhat.com/errata/RHSA-2024:1404","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-6606","https://bugzilla.kernel.org/show_bug.cgi?id=218218","https://bugzilla.redhat.com/show_bug.cgi?id=2253611"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6606","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2023-12-11T21:20:47.767463Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-07-11T14:22:01.806Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0723","name":"RHSA-2024:0723","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0725","name":"RHSA-2024:0725","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0881","name":"RHSA-2024:0881","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0897","name":"RHSA-2024:0897","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1188","name":"RHSA-2024:1188","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1248","name":"RHSA-2024:1248","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","name":"RHSA-2024:1404","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","name":"RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6606","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=218218","tags":["x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253611","name":"RHBZ#2253611","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:35:14.877Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:17.978Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-08T07:10:24.326Z"}}},"related_cves":[{"value":"CVE-2023-6606","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24295,"advisory_id":"efb8afea-2a97-4b03-b0b2-bebf9c7379e1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6780","source_published_at":"2024-01-31T14:08:02.61+00:00","published_at":"2026-10-25T06:33:08.581146+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6780"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: integer overflow in __vsyslog_internal()","summary":"An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6780","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-6780","aliases":["CVE-2023-6780"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:20.900Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6780","https://bugzilla.redhat.com/show_bug.cgi?id=2254396","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6780","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254396","name":"RHBZ#2254396","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20250207-0010/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-02-07T17:02:41.644Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6780","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-01-31T16:36:34.378685Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-17T21:29:19.534Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:20.900Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-03-26T15:30:47.720Z"}}},"related_cves":[{"value":"CVE-2023-6780","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24293,"advisory_id":"899fe0cb-2a44-44fa-b0b8-921c86d4ecc8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6246","source_published_at":"2024-01-31T14:06:21.949+00:00","published_at":"2026-10-25T06:33:07.419804+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6246"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: heap-based buffer overflow in __vsyslog_internal()","summary":"A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.","evidence":"cve:CVE-2023-6246","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6246","aliases":["CVE-2023-6246"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.4,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:16.680Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6246","https://bugzilla.redhat.com/show_bug.cgi?id=2249053","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240216-0007/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Read-Write.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/5","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6246","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249053","name":"RHBZ#2249053","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0007/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:18.105Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-02-09T05:00:28.307432Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-10-17T17:53:03.744Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:16.680Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-16T13:05:53.547Z"}}},"related_cves":[{"value":"CVE-2023-6246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24291,"advisory_id":"7153553f-14cd-4d54-94f2-9c48f3369793","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6121","source_published_at":"2023-11-16T14:45:38.43+00:00","published_at":"2026-10-25T06:33:05.867748+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6121"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get","summary":"An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).","evidence":"cve:CVE-2023-6121","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-6121","aliases":["CVE-2023-6121"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::realtime","cpe:/a:redhat:enterprise_linux:8::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-553.rt7.342.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-553.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-427.13.1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-427.13.1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T22:07:16.115Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:2394","https://access.redhat.com/errata/RHSA-2024:2950","https://access.redhat.com/errata/RHSA-2024:3138","https://access.redhat.com/security/cve/CVE-2023-6121","https://bugzilla.redhat.com/show_bug.cgi?id=2250043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6121","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-10T13:58:01.737027Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-10T13:58:09.509Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2394","name":"RHSA-2024:2394","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2950","name":"RHSA-2024:2950","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3138","name":"RHSA-2024:3138","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6121","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250043","name":"RHBZ#2250043","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:17.422Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:07:16.115Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-06T20:01:43.127Z"}}},"related_cves":[{"value":"CVE-2023-6121","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24289,"advisory_id":"be926913-b022-4821-a6dc-548f709449f6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5981","source_published_at":"2023-11-28T11:49:50.138+00:00","published_at":"2026-10-25T06:33:04.68879+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-8-8-extended-update-support","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-extended-update-support","rhodf-4-15-rhel-9","rhol-5-8-rhel-9"],"cve_ids":["CVE-2023-5981"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: timing side-channel in the rsa-psk authentication","summary":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","evidence":"cve:CVE-2023-5981","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHODF-4.15-RHEL-9","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOL-5.8-RHEL-9","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-5981","aliases":["CVE-2023-5981"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhel_eus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.8::baseos","cpe:/a:redhat:rhel_eus:8.8::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.7.6-23.el9_3.3","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.7.6-23.el9_3.3","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream","cpe:/o:redhat:rhel_eus:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-37","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/cephcsi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-68","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/mcg-core-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/mcg-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-39","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/mcg-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-58","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-client-console-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-client-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-13","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-client-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-81","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-metrics-exporter-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-79","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/ocs-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-22","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-cli-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-57","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-console-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-cosi-sidecar-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-csi-addons-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-15","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-csi-addons-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-15","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-csi-addons-sidecar-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-54","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-multicluster-console-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-multicluster-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-10","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-multicluster-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-26","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-must-gather-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-19","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odf-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odr-cluster-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-158","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odr-hub-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-21","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/odr-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"vendor":"Red Hat","product":"RHODF-4.15-RHEL-9","versions":[{"status":"unaffected","version":"v4.15.0-103","lessThan":"*","versionType":"rpm"}],"packageName":"odf4/rook-ceph-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-22","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/cluster-logging-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-11","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/cluster-logging-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v6.8.1-407","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch6-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-19","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v1.0.0-479","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-proxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-7","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/elasticsearch-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.4.0-247","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/eventrouter-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-5","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/fluentd-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v1.1.0-227","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/log-file-metric-exporter-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.1-470","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-curator5-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v2.9.6-14","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-loki-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-2","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/logging-view-plugin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-24","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/loki-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v5.8.6-10","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/loki-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.1.0-525","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/lokistack-gateway-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.1.0-224","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/opa-openshift-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:logging:5.8::el9"],"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","versions":[{"status":"unaffected","version":"v0.28.1-56","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-logging/vector-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T22:07:14.101Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:0155","https://access.redhat.com/errata/RHSA-2024:0319","https://access.redhat.com/errata/RHSA-2024:0399","https://access.redhat.com/errata/RHSA-2024:0451","https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-5981","https://bugzilla.redhat.com/show_bug.cgi?id=2248445","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2024/01/19/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0155","name":"RHSA-2024:0155","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0319","name":"RHSA-2024:0319","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0399","name":"RHSA-2024:0399","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0451","name":"RHSA-2024:0451","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0533","name":"RHSA-2024:0533","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1383","name":"RHSA-2024:1383","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","name":"RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5981","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248445","name":"RHBZ#2248445","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-04T19:25:53.708Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:07:14.101Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-02-25T18:19:40.648Z"}}},"related_cves":[{"value":"CVE-2023-5981","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24285,"advisory_id":"ca9dfd5f-4f5d-4f0d-bf09-598fff715804","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5178","source_published_at":"2023-11-01T16:32:20.35+00:00","published_at":"2026-10-25T06:33:02.329445+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-2-telecommunications-update-service","red-hat-enterprise-linux-8-2-update-services-for-sap-solutions","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-telecommunications-update-service","red-hat-enterprise-linux-8-4-update-services-for-sap-solutions","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-8-8-extended-update-support","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-extended-update-support","red-hat-enterprise-linux-9-2-extended-update-support","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-5178"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: use after free in nvmet_tcp_free_crypto in nvme","summary":"A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.","evidence":"cve:CVE-2023-5178","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Extended Update Support","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Extended Update Support","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-5178","aliases":["CVE-2023-5178"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::realtime","cpe:/a:redhat:enterprise_linux:8::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.9.1.rt7.311.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.9.1.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-193.128.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_tus:8.2::realtime","cpe:/a:redhat:rhel_tus:8.2::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-193.128.1.rt13.179.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-193.128.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.18.0-193.128.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-305.114.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_tus:8.4::realtime","cpe:/a:redhat:rhel_tus:8.4::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-305.114.1.rt7.190.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-305.114.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.18.0-305.114.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/o:redhat:rhel_eus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-372.87.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.8::crb","cpe:/o:redhat:rhel_eus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-477.43.1.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.18.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.18.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.0::crb","cpe:/a:redhat:rhel_eus:9.0::appstream","cpe:/o:redhat:rhel_eus:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-70.85.1.el9_0","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.0::nfv","cpe:/a:redhat:rhel_eus:9.0::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-70.85.1.rt21.156.el9_0","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::crb","cpe:/o:redhat:rhel_eus:9.2::baseos","cpe:/a:redhat:rhel_eus:9.2::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-284.40.1.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::nfv","cpe:/a:redhat:rhel_eus:9.2::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-284.40.1.rt14.325.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/o:redhat:rhel_eus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-372.87.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:54:13.573Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:7370","https://access.redhat.com/errata/RHSA-2023:7379","https://access.redhat.com/errata/RHSA-2023:7418","https://access.redhat.com/errata/RHSA-2023:7548","https://access.redhat.com/errata/RHSA-2023:7549","https://access.redhat.com/errata/RHSA-2023:7551","https://access.redhat.com/errata/RHSA-2023:7554","https://access.redhat.com/errata/RHSA-2023:7557","https://access.redhat.com/errata/RHSA-2023:7559","https://access.redhat.com/errata/RHSA-2024:0340","https://access.redhat.com/errata/RHSA-2024:0378","https://access.redhat.com/errata/RHSA-2024:0386","https://access.redhat.com/errata/RHSA-2024:0412","https://access.redhat.com/errata/RHSA-2024:0431","https://access.redhat.com/errata/RHSA-2024:0432","https://access.redhat.com/errata/RHSA-2024:0461","https://access.redhat.com/errata/RHSA-2024:0554","https://access.redhat.com/errata/RHSA-2024:0575","https://access.redhat.com/errata/RHSA-2024:1268","https://access.redhat.com/errata/RHSA-2024:1269","https://access.redhat.com/errata/RHSA-2024:1278","https://access.redhat.com/security/cve/CVE-2023-5178","https://bugzilla.redhat.com/show_bug.cgi?id=2241924","https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:7370","name":"RHSA-2023:7370","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7379","name":"RHSA-2023:7379","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7418","name":"RHSA-2023:7418","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7548","name":"RHSA-2023:7548","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7549","name":"RHSA-2023:7549","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7551","name":"RHSA-2023:7551","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7554","name":"RHSA-2023:7554","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7557","name":"RHSA-2023:7557","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7559","name":"RHSA-2023:7559","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0340","name":"RHSA-2024:0340","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0378","name":"RHSA-2024:0378","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0386","name":"RHSA-2024:0386","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0412","name":"RHSA-2024:0412","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0431","name":"RHSA-2024:0431","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0432","name":"RHSA-2024:0432","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0461","name":"RHSA-2024:0461","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0554","name":"RHSA-2024:0554","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0575","name":"RHSA-2024:0575","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1268","name":"RHSA-2024:1268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1269","name":"RHSA-2024:1269","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1278","name":"RHSA-2024:1278","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5178","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241924","name":"RHBZ#2241924","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]},{"url":"https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231208-0004/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:52:07.827Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:54:13.573Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-03-24T11:22:55.452Z"}}},"related_cves":[{"value":"CVE-2023-5178","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24284,"advisory_id":"e5227282-3873-4638-acfb-bf8eeb77ac6a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5156","source_published_at":"2023-09-25T15:55:15.558+00:00","published_at":"2026-10-25T06:33:01.708287+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-5156"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: dos due to memory leak in getaddrinfo.c","summary":"A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.","evidence":"cve:CVE-2023-5156","products":[{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-5156","aliases":["CVE-2023-5156"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:54:12.207Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-5156","https://bugzilla.redhat.com/show_bug.cgi?id=2240541","https://sourceware.org/bugzilla/show_bug.cgi?id=30884","https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/8","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5156","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240541","name":"RHBZ#2240541","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=30884","tags":["x_transferred"]},{"url":"https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:52:07.535Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-5156","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-15T20:03:45.500372Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-18T15:38:54.080Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:54:12.207Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-20T17:29:59.677Z"}}},"related_cves":[{"value":"CVE-2023-5156","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24282,"advisory_id":"bf0de64c-e794-41e5-86f0-238b12dd0893","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4273","source_published_at":"2023-08-09T14:53:44.835+00:00","published_at":"2026-10-25T06:33:00.534109+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-4273"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry","summary":"A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.","evidence":"cve:CVE-2023-4273","products":[{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-4273","aliases":["CVE-2023-4273"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:50:17.655Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:6583","https://access.redhat.com/security/cve/CVE-2023-4273","https://bugzilla.redhat.com/show_bug.cgi?id=2221609","https://dfir.ru/2023/08/23/cve-2023-4273-a-vulnerability-in-the-linux-exfat-driver/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6583","name":"RHSA-2023:6583","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4273","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221609","name":"RHBZ#2221609","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://dfir.ru/2023/08/23/cve-2023-4273-a-vulnerability-in-the-linux-exfat-driver/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/344H6HO6SSC4KT7PDFXSDIXKMKHISSGF/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TYLSJ2SAI7RF56ZLQ5CQWCJLVJSD73Q/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0002/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:24:04.673Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4273","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-02-27T20:32:41.286135Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-27T21:05:23.329Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:27:44.076Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T21:50:17.655Z"}}},"related_cves":[{"value":"CVE-2023-4273","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24281,"advisory_id":"1edbc1b1-7f33-4ecc-9edc-a16723cd5eaa","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4911","source_published_at":"2023-10-03T17:25:08.434+00:00","published_at":"2026-10-25T06:32:59.92642+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-extended-update-support","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-4911"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: buffer overflow in ld.so leading to privilege escalation","summary":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","evidence":"cve:CVE-2023-4911","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-4911","aliases":["CVE-2023-4911"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"2.34","lessThan":"2.39","versionType":"custom"}],"packageName":"glibc","collectionURL":"https://sourceware.org/git/glibc.git","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/a:redhat:rhel_eus:8.6::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.28-189.6.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream","cpe:/o:redhat:rhel_eus:9.0::baseos","cpe:/a:redhat:rhel_eus:9.0::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.34-28.el9_0.4","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhev_hypervisor:4.4::el8","cpe:/a:redhat:rhel_eus:8.6::crb"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-189.6.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.5.3-10.el8ev","lessThan":"*","versionType":"rpm"}],"packageName":"redhat-release-virtualization-host","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.5.3-202312060823_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"redhat-virtualization-host","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:45:37.956Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5454","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:5476","https://access.redhat.com/errata/RHSA-2024:0033","https://access.redhat.com/security/cve/CVE-2023-4911","https://bugzilla.redhat.com/show_bug.cgi?id=2238352","https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt","https://www.qualys.com/cve-2023-4911/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.exploit-db.com/exploits/52479"},{"url":"http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/11","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/05/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/13/11","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/14/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/14/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/14/6","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5453","name":"RHSA-2023:5453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5454","name":"RHSA-2023:5454","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5455","name":"RHSA-2023:5455","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5476","name":"RHSA-2023:5476","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0033","name":"RHSA-2024:0033","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4911","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238352","name":"RHBZ#2238352","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202310-03","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231013-0006/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5514","tags":["x_transferred"]},{"url":"https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt","tags":["x_transferred"]},{"url":"https://www.qualys.com/cve-2023-4911/","tags":["x_transferred"]}],"x_generator":{"engine":"ADPogram 0.0.1"},"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-02-13T17:01:57.799Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4911","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-10-15T19:45:35.724824Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2023-11-21","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911"}}}],"timeline":[{"lang":"en","time":"2023-11-21T00:00:00.000Z","value":"CVE-2023-4911 added to CISA KEV"}],"references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911","tags":["government-resource"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-10-21T23:05:35.687Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:45:37.956Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-02-05T17:25:54.427Z"}}},"related_cves":[{"value":"CVE-2023-4911","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24280,"advisory_id":"2182afbd-7821-4f1d-b68c-859e1707c568","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4813","source_published_at":"2023-09-12T21:54:33.387+00:00","published_at":"2026-10-25T06:32:59.347823+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-9","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-4813"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: potential use-after-free in gaih_inet()","summary":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.","evidence":"cve:CVE-2023-4813","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-4813","aliases":["CVE-2023-4813"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.28-189.8.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-100.el9","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-100.el9","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-189.8.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:41:01.502Z","provider":"cve","references":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/8","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5453","name":"RHSA-2023:5453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5455","name":"RHSA-2023:5455","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7409","name":"RHSA-2023:7409","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4813","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237798","name":"RHBZ#2237798","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231110-0003/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:38:00.731Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:41:01.502Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-11T19:29:11.106Z"}}},"related_cves":[{"value":"CVE-2023-4813","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24278,"advisory_id":"198c478c-4b79-4dc1-938d-9f5bd02ed2e3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4806","source_published_at":"2023-09-18T16:33:57.211+00:00","published_at":"2026-10-25T06:32:58.190438+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-9","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-4806"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: potential use-after-free in getaddrinfo()","summary":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.","evidence":"cve:CVE-2023-4806","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-4806","aliases":["CVE-2023-4806"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.28-189.8.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-189.8.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:40:57.569Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/8","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5453","name":"RHSA-2023:5453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5455","name":"RHSA-2023:5455","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7409","name":"RHSA-2023:7409","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4806","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237782","name":"RHBZ#2237782","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202310-03","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240125-0008/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:38:00.704Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-02-15T19:32:30.612167Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-09T14:59:06.809Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:40:57.569Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-07-14T13:23:06.586Z"}}},"related_cves":[{"value":"CVE-2023-4806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24276,"advisory_id":"433a1086-551b-47d3-bb0c-c931dea60ccc","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4527","source_published_at":"2023-09-18T16:32:18.597+00:00","published_at":"2026-10-25T06:32:57.053976+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-4527"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: stack read overflow in getaddrinfo in no-aaaa mode","summary":"A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.","evidence":"cve:CVE-2023-4527","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-4527","aliases":["CVE-2023-4527"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.28-225.el8_8.6","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.34-60.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:32:18.501Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/security/cve/CVE-2023-4527","https://bugzilla.redhat.com/show_bug.cgi?id=2234712"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/1","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5453","name":"RHSA-2023:5453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5455","name":"RHSA-2023:5455","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4527","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234712","name":"RHBZ#2234712","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202310-03","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231116-0012/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:31:06.064Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4527","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-12-03T14:44:32.771215Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-12-03T14:44:48.342Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:32:18.501Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-20T18:27:44.022Z"}}},"related_cves":[{"value":"CVE-2023-4527","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23251,"advisory_id":"2b91587d-e2c3-4081-af4e-f57d6f74085c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4004","source_published_at":"2023-07-31T16:22:18.38+00:00","published_at":"2026-10-25T06:15:30.620854+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-2-telecommunications-update-service","red-hat-enterprise-linux-8-2-update-services-for-sap-solutions","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-telecommunications-update-service","red-hat-enterprise-linux-8-4-update-services-for-sap-solutions","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-extended-update-support","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-4004"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()","summary":"A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.","evidence":"cve:CVE-2023-4004","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Extended Update Support","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-4004","aliases":["CVE-2023-4004"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::realtime","cpe:/a:redhat:enterprise_linux:8::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-477.27.1.rt7.290.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-477.27.1.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-193.119.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_tus:8.2::nfv","cpe:/a:redhat:rhel_tus:8.2::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-193.119.1.rt13.170.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-193.119.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.18.0-193.119.1.el8_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-305.103.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_tus:8.4::nfv","cpe:/a:redhat:rhel_tus:8.4::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-305.103.1.rt7.178.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.18.0-305.103.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos","cpe:/o:redhat:rhel_aus:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.18.0-305.103.1.el8_4","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-372.75.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-284.30.1.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-284.30.1.rt14.315.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-284.30.1.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream","cpe:/a:redhat:rhel_eus:9.0::crb","cpe:/o:redhat:rhel_eus:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-70.80.1.el9_0","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.0::realtime","cpe:/a:redhat:rhel_eus:9.0::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:5.14.0-70.80.1.rt21.151.el9_0","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kpatch-patch","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-372.75.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:18:25.038Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:4961","https://access.redhat.com/errata/RHSA-2023:4962","https://access.redhat.com/errata/RHSA-2023:4967","https://access.redhat.com/errata/RHSA-2023:5069","https://access.redhat.com/errata/RHSA-2023:5091","https://access.redhat.com/errata/RHSA-2023:5093","https://access.redhat.com/errata/RHSA-2023:5221","https://access.redhat.com/errata/RHSA-2023:5244","https://access.redhat.com/errata/RHSA-2023:5255","https://access.redhat.com/errata/RHSA-2023:5548","https://access.redhat.com/errata/RHSA-2023:5627","https://access.redhat.com/errata/RHSA-2023:7382","https://access.redhat.com/errata/RHSA-2023:7389","https://access.redhat.com/errata/RHSA-2023:7411","https://access.redhat.com/errata/RHSA-2023:7417","https://access.redhat.com/errata/RHSA-2023:7431","https://access.redhat.com/errata/RHSA-2023:7434","https://access.redhat.com/security/cve/CVE-2023-4004","https://bugzilla.redhat.com/show_bug.cgi?id=2225275","https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4961","name":"RHSA-2023:4961","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4962","name":"RHSA-2023:4962","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4967","name":"RHSA-2023:4967","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5069","name":"RHSA-2023:5069","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5091","name":"RHSA-2023:5091","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5093","name":"RHSA-2023:5093","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5221","name":"RHSA-2023:5221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5244","name":"RHSA-2023:5244","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5255","name":"RHSA-2023:5255","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5548","name":"RHSA-2023:5548","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5627","name":"RHSA-2023:5627","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7382","name":"RHSA-2023:7382","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7389","name":"RHSA-2023:7389","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7411","name":"RHSA-2023:7411","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7417","name":"RHSA-2023:7417","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7431","name":"RHSA-2023:7431","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7434","name":"RHSA-2023:7434","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4004","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225275","name":"RHBZ#2225275","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0001/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:17:11.551Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:18:25.038Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-08T03:13:35.436Z"}}},"related_cves":[{"value":"CVE-2023-4004","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23248,"advisory_id":"b14327b6-effb-4e02-99fd-a7f7302236ac","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3773","source_published_at":"2023-07-25T15:47:40.391+00:00","published_at":"2026-10-25T06:15:28.782506+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-3773"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr","summary":"A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.","evidence":"cve:CVE-2023-3773","products":[{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-3773","aliases":["CVE-2023-3773"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:13:44.467Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:6583","https://access.redhat.com/security/cve/CVE-2023-3773","https://bugzilla.redhat.com/show_bug.cgi?id=2218944"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6583","name":"RHSA-2023:6583","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3773","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218944","name":"RHBZ#2218944","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:08:49.757Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3773","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-05T18:33:27.598158Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:47:25.761Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:13:44.467Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-14T14:21:06.184Z"}}},"related_cves":[{"value":"CVE-2023-3773","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23247,"advisory_id":"99e1e539-0b72-4276-8fed-26f89391d14a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3772","source_published_at":"2023-07-25T15:47:40.183+00:00","published_at":"2026-10-25T06:15:28.21208+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-6-extended-update-support","red-hat-enterprise-linux-8-8-extended-update-support","red-hat-enterprise-linux-9","red-hat-virtualization-4-for-red-hat-enterprise-linux-8"],"cve_ids":["CVE-2023-3772"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()","summary":"A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.","evidence":"cve:CVE-2023-3772","products":[{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-3772","aliases":["CVE-2023-3772"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/a:redhat:enterprise_linux:8::realtime","cpe:/a:redhat:enterprise_linux:8::nfv"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.5.1.rt7.307.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos","cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-513.5.1.el8_9","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-372.87.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:8.8::crb","cpe:/o:redhat:rhel_eus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","versions":[{"status":"unaffected","version":"0:4.18.0-477.43.1.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/o:redhat:enterprise_linux:9::baseos","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::realtime"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhev_hypervisor:4.4::el8"],"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:4.18.0-372.87.1.el8_6","lessThan":"*","versionType":"rpm"}],"packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T21:13:43.266Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:6583","https://access.redhat.com/errata/RHSA-2023:6901","https://access.redhat.com/errata/RHSA-2023:7077","https://access.redhat.com/errata/RHSA-2024:0412","https://access.redhat.com/errata/RHSA-2024:0575","https://access.redhat.com/security/cve/CVE-2023-3772","https://bugzilla.redhat.com/show_bug.cgi?id=2218943"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2023/08/10/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/08/10/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6583","name":"RHSA-2023:6583","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6901","name":"RHSA-2023:6901","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7077","name":"RHSA-2023:7077","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0412","name":"RHSA-2024:0412","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0575","name":"RHSA-2024:0575","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3772","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218943","name":"RHBZ#2218943","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:08:49.645Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:13:43.266Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2025-11-07T13:03:42.167Z"}}},"related_cves":[{"value":"CVE-2023-3772","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23221,"advisory_id":"3a77199a-8d31-4cbf-a962-19048523cbb5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3338","source_published_at":"2023-06-30T00:00:00+00:00","published_at":"2026-10-25T06:15:11.487499+00:00","extraction_method":"structured","technologies":["core-cve","fedora","kernel","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-3338"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Crash due to a null pointer dereference in the dn_nsp_send function","summary":"A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.","evidence":"cve:CVE-2023-3338","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-3338","aliases":["CVE-2023-3338"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"kernel","versions":[{"status":"unaffected","version":"6.5-rc1"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"kernel","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T20:51:32.938Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-3338","https://bugzilla.redhat.com/show_bug.cgi?id=2218618","https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://seclists.org/oss-sec/2023/q2/276","https://security.netapp.com/advisory/ntap-20230824-0005/","https://www.debian.org/security/2023/dsa-5480"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-3338","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218618","name":"RHBZ#2218618","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://seclists.org/oss-sec/2023/q2/276","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230824-0005/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:55:03.281Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3338","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-05T18:41:18.404363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:55:11.038Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:51:32.938Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-01-23T02:34:01.241Z"}}},"related_cves":[{"value":"CVE-2023-3338","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23112,"advisory_id":"228be0ee-c1f8-4bd6-9d9a-d3216f115a35","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5419","source_published_at":"2026-06-01T19:26:56.524+00:00","published_at":"2026-10-25T06:13:09.749921+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-5419"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal","summary":"A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.","evidence":"cve:CVE-2026-5419","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-5419","aliases":["CVE-2026-5419"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:45:47.744Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-5419","https://bugzilla.redhat.com/show_bug.cgi?id=2467686","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-5419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-02T12:35:30.709028Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-02T12:35:40.969Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:45:47.744Z"}}},"related_cves":[{"value":"CVE-2026-5419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23110,"advisory_id":"556feb42-5536-476d-ba06-060847818968","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-3832","source_published_at":"2026-04-30T17:41:28.896+00:00","published_at":"2026-10-25T06:13:08.561542+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-3832"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response","summary":"A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.","evidence":"cve:CVE-2026-3832","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-3832","aliases":["CVE-2026-3832"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"3.8.13","versionType":"semver"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:45:46.353Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3832","https://bugzilla.redhat.com/show_bug.cgi?id=2445762","https://gitlab.com/gnutls/gnutls/-/issues/1801"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-3832","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-30T18:22:07.438915Z"}}}],"references":[{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-18T20:22:06.192Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:45:46.353Z"}}},"related_cves":[{"value":"CVE-2026-3832","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23105,"advisory_id":"9631ec9d-df87-4dd7-a40d-f9724edd14ca","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-9820","source_published_at":"2026-01-26T19:58:32.886+00:00","published_at":"2026-10-25T06:13:05.627095+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ceph-storage-8","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","rhel-8-based-middleware-containers"],"cve_ids":["CVE-2025-9820"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function","summary":"A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.","evidence":"cve:CVE-2025-9820","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-9820","aliases":["CVE-2025-9820"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"3.8.1"},{"status":"affected","version":"3.8.2"},{"status":"affected","version":"3.8.3"},{"status":"affected","version":"3.8.4"},{"status":"affected","version":"3.8.5"},{"status":"affected","version":"3.8.6"},{"status":"affected","version":"3.8.7"},{"status":"affected","version":"3.8.8"},{"status":"affected","version":"3.8.9"},{"status":"affected","version":"3.8.10"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-3.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325677","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325711","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325710","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325709","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325708","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1774002867","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.12-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1773685509","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773668803","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:46:28.307Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/security/cve/CVE-2025-9820","https://bugzilla.redhat.com/show_bug.cgi?id=2392528","https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5","https://gitlab.com/gnutls/gnutls/-/issues/1732","https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/11/20/2"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-01-26T20:08:12.926Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-9820","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-26T20:10:45.615719Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-26T20:12:19.249Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-05-12T12:02:44.799Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:46:28.307Z"}}},"related_cves":[{"value":"CVE-2025-9820","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23071,"advisory_id":"7d729381-a2dd-42e9-b3d4-7e279e44077f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-2100","source_published_at":"2026-03-26T20:01:46.174+00:00","published_at":"2026-10-25T06:12:45.246592+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","p11-kit","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-2100"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"P11-kit: null dereference via c_derivekey with specific null parameters","summary":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","evidence":"cve:CVE-2026-2100","products":[{"name":{"value":"p11-kit","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-2100","aliases":["CVE-2026-2100"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/p11-glue/p11-kit","vendor":"p11-glue","product":"p11-kit","versions":[{"status":"affected","version":"0","lessThan":"0.26.2","versionType":"semver"}],"defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:0.26.2-1.el10","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.2-1.el9","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.2-1.el9","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1780946239","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.2-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1780420428","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798159","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798164","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798165","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798222","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:24:02.035Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:18143","https://access.redhat.com/errata/RHSA-2026:18599","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:27998","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:7065","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-2100","https://bugzilla.redhat.com/show_bug.cgi?id=2437308","https://github.com/p11-glue/p11-kit/pull/740","https://github.com/p11-glue/p11-kit/releases/tag/0.26.2"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-2100","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-26T20:30:34.453809Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-26T20:30:53.390Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:02.035Z"}}},"related_cves":[{"value":"CVE-2026-2100","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23067,"advisory_id":"813ddb32-5f52-4373-9b5a-f8ede38176cb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-14164","source_published_at":"2026-06-30T06:29:23.549+00:00","published_at":"2026-10-25T06:12:42.610295+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-ai-inference-server-3-5","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-openshift-container-platform-4-20","red-hat-openshift-container-platform-4-21","red-hat-openshift-container-platform-4-22","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-14164"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()","summary":"A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.","evidence":"cve:CVE-2026-14164","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.20","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.21","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.22","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.5","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-14164","aliases":["CVE-2026-14164"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.7.7-10.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-11.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-11.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2.3","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202609080414-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202609011250-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202609140326-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202609140240-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202609191027-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202609031320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202609171815-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202609021231-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.20::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","versions":[{"status":"unaffected","version":"4.20.9.6.202609021029-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.21::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","versions":[{"status":"unaffected","version":"4.21.9.6.202609021100-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.22::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.22","versions":[{"status":"unaffected","version":"4.22.9.8.202608130832-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","versions":[{"status":"unaffected","version":"1791427182","lessThan":"*","versionType":"rpm"}],"packageName":"rhaii/vllm-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","versions":[{"status":"unaffected","version":"1791818357","lessThan":"*","versionType":"rpm"}],"packageName":"rhaii/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786638573","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1788206196","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.8-2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276886","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276884","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790277045","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276889","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276974","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703497","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703506","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703568","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703586","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703494","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435241","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533457","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533449","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:24:49.682Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:30333","https://access.redhat.com/errata/RHSA-2026:52674","https://access.redhat.com/errata/RHSA-2026:52675","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:54769","https://access.redhat.com/errata/RHSA-2026:56954","https://access.redhat.com/errata/RHSA-2026:58558","https://access.redhat.com/errata/RHSA-2026:58573","https://access.redhat.com/errata/RHSA-2026:58574","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:63041","https://access.redhat.com/errata/RHSA-2026:63044","https://access.redhat.com/errata/RHSA-2026:63100","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:67935","https://access.redhat.com/errata/RHSA-2026:70586","https://access.redhat.com/errata/RHSA-2026:70615","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82061","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82371","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-14164","https://bugzilla.redhat.com/show_bug.cgi?id=2493411","https://github.com/libarchive/libarchive/issues/3069","https://github.com/libarchive/libarchive/pull/3071"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-14164","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-30T12:20:53.891666Z"}}}],"references":[{"url":"https://github.com/libarchive/libarchive/issues/3069","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-30T12:22:17.042Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:49.682Z"}}},"related_cves":[{"value":"CVE-2026-14164","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23066,"advisory_id":"7b6c4c06-fc69-4de8-ae1d-075767f95bee","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-13757","source_published_at":"2026-06-29T18:44:24.583+00:00","published_at":"2026-10-25T06:12:42.004319+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-13757"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing","summary":"A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.","evidence":"cve:CVE-2026-13757","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-13757","aliases":["CVE-2026-13757"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:0.26.4-1.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.4-1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.4-1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1790844333","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786638573","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786634825","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.2-1.2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.4-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1786433656","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435241","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533457","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533449","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:24:48.694Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:37469","https://access.redhat.com/errata/RHSA-2026:38342","https://access.redhat.com/errata/RHSA-2026:49667","https://access.redhat.com/errata/RHSA-2026:49668","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:81201","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-13757","https://bugzilla.redhat.com/show_bug.cgi?id=2494556","https://github.com/advisories/GHSA-p2wm-69qx-x25w"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-13757","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-01T14:21:14.619672Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-01T14:21:43.532Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:48.694Z"}}},"related_cves":[{"value":"CVE-2026-13757","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23062,"advisory_id":"299bf89b-0876-4e1b-a389-ec53566de04e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-5278","source_published_at":"2025-05-27T20:52:58.545+00:00","published_at":"2026-10-25T06:12:39.736635+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-openshift-distributed-tracing-3-10-2","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-5278"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Coreutils: heap buffer under-read in gnu coreutils sort via key specification","summary":"A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.","evidence":"cve:CVE-2025-5278","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-5278","aliases":["CVE-2025-5278"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"7.2","lessThan":"9.8","versionType":"semver"}],"packageName":"coreutils","collectionURL":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.5-8.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.30-21.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.32-41.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1783539156","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782756541","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821670","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1782890503","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501180","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-opa-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501200","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782498923","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-jaeger-query-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782510941","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501220","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-query-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501196","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501195","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1785704636","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-collector-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1785704547","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794818","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794778","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795112","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794289","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795076","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:23:53.947Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:28911","https://access.redhat.com/errata/RHSA-2026:33124","https://access.redhat.com/errata/RHSA-2026:33313","https://access.redhat.com/errata/RHSA-2026:33612","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:69964","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2025-5278","https://bugzilla.redhat.com/show_bug.cgi?id=2368764","https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/05/27/2"},{"url":"http://www.openwall.com/lists/oss-security/2025/05/29/1"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5278"},{"url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"},{"url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14"},{"url":"http://www.openwall.com/lists/oss-security/2025/05/29/2"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-05-29T18:03:55.440Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-5278","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-05-28T13:46:35.101788Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-28T13:48:21.860Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:23:53.947Z"}}},"related_cves":[{"value":"CVE-2025-5278","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23061,"advisory_id":"7c0aad42-2f59-4fed-b6df-91b9072a7865","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14831","source_published_at":"2026-02-09T14:51:32.447+00:00","published_at":"2026-10-25T06:12:39.127739+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ai-inference-server-3-2","red-hat-ai-inference-server-3-3","red-hat-ceph-storage-8","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","rhel-8-based-middleware-containers"],"cve_ids":["CVE-2025-14831"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification","summary":"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).","evidence":"cve:CVE-2025-14831","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14831","aliases":["CVE-2025-14831"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-3.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.17","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.3","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325677","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325711","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325710","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325709","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325708","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1775740563","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244559","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244531","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244546","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680192","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680262","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775749857","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1774002867","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.12-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1773685509","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773668803","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:31:33.894Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6618","https://access.redhat.com/errata/RHSA-2026:6630","https://access.redhat.com/errata/RHSA-2026:6737","https://access.redhat.com/errata/RHSA-2026:6738","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2025-14831","https://bugzilla.redhat.com/show_bug.cgi?id=2423177","https://gitlab.com/gnutls/gnutls/-/issues/1773"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14831","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-02-09T15:25:49.680881Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-09T15:26:01.239Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-05-12T12:02:57.683Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:31:33.894Z"}}},"related_cves":[{"value":"CVE-2025-14831","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23060,"advisory_id":"a8ecaa63-b8ad-4318-b0eb-ac1b10ce8c31","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14512","source_published_at":"2025-12-11T07:11:02.182+00:00","published_at":"2026-10-25T06:12:38.406238+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","glib","red-hat-ai-inference-server-3-2","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-14512"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow","summary":"A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.","evidence":"cve:CVE-2025-14512","products":[{"name":{"value":"glib","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14512","aliases":["CVE-2025-14512"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"GNOME","product":"glib","versions":[{"status":"affected","version":"0","lessThan":"2.86.3","versionType":"semver"}],"packageName":"glib","collectionURL":"https://gitlab.gnome.org/GNOME/glib","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-10.el10_1.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-12.el10_2.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.80.4-4.el10_0.9","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.56.4-169.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-5.el9_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-7.el9_2.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-14.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-16.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.88.0-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1780420428","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798159","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798164","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798165","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798222","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:23:56.008Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:15953","https://access.redhat.com/errata/RHSA-2026:15969","https://access.redhat.com/errata/RHSA-2026:15971","https://access.redhat.com/errata/RHSA-2026:19148","https://access.redhat.com/errata/RHSA-2026:19361","https://access.redhat.com/errata/RHSA-2026:19452","https://access.redhat.com/errata/RHSA-2026:19457","https://access.redhat.com/errata/RHSA-2026:19459","https://access.redhat.com/errata/RHSA-2026:19460","https://access.redhat.com/errata/RHSA-2026:19523","https://access.redhat.com/errata/RHSA-2026:19524","https://access.redhat.com/errata/RHSA-2026:19565","https://access.redhat.com/errata/RHSA-2026:19567","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2025-14512","https://bugzilla.redhat.com/show_bug.cgi?id=2421339","https://gitlab.gnome.org/GNOME/glib/-/issues/3845"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14512","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-11T14:54:52.039681Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-06T14:45:25.859Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:23:56.008Z"}}},"related_cves":[{"value":"CVE-2025-14512","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23059,"advisory_id":"e2bcff46-f6a2-4cbd-b6c6-b6167287b2bb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14104","source_published_at":"2025-12-05T16:22:09.283+00:00","published_at":"2026-10-25T06:12:37.741739+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ceph-storage-7","red-hat-ceph-storage-8","red-hat-ceph-storage-9","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","util-linux"],"cve_ids":["CVE-2025-14104"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames","summary":"A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.","evidence":"cve:CVE-2025-14104","products":[{"name":{"value":"util-linux","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14104","aliases":["CVE-2025-14104"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"util-linux","product":"util-linux","versions":[{"status":"affected","version":"0","lessThan":"2.41.3","versionType":"semver"}],"packageName":"util-linux","collectionURL":"https://github.com/util-linux/util-linux","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.40.2-15.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.32.1-48.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.32.1-48.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.37.4-21.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.37.4-21.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:7::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","versions":[{"status":"unaffected","version":"1770632724","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-7-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1770630907","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:9::el10"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","versions":[{"status":"unaffected","version":"1771816028","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.42-7.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1770740405","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1770646925","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"util-linux-ng","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:31:48.792Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:1696","https://access.redhat.com/errata/RHSA-2026:1852","https://access.redhat.com/errata/RHSA-2026:1913","https://access.redhat.com/errata/RHSA-2026:2485","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2737","https://access.redhat.com/errata/RHSA-2026:2800","https://access.redhat.com/errata/RHSA-2026:3406","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:7180","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/security/cve/CVE-2025-14104","https://bugzilla.redhat.com/show_bug.cgi?id=2419369"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14104","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-05T20:03:09.994553Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-05T20:03:19.733Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:31:48.792Z"}}},"related_cves":[{"value":"CVE-2025-14104","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23048,"advisory_id":"883edc07-9a45-4439-bca9-ecb462906724","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55655","source_published_at":"2026-06-23T03:36:25.724+00:00","published_at":"2026-10-25T06:12:29.715632+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-3","red-hat-openshift-ai-3-4","red-hat-openshift-ai-3-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-55655"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","summary":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","evidence":"cve:CVE-2026-55655","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-55655","aliases":["CVE-2026-55655"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.9p1-25.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.9p1-7.el10_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.7p1-45.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.3p1-6.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818589","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818496","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818502","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818602","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818598","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818587","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818778","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818627","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818790","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818874","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818792","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818662","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818877","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883722","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881612","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885618","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881487","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881732","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883315","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.1-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881486","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881769","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819252","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818749","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819206","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818979","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819123","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.14-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818901","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791820333","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rubin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819495","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819104","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T19:11:14.188Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:36759","https://access.redhat.com/errata/RHSA-2026:47755","https://access.redhat.com/errata/RHSA-2026:47756","https://access.redhat.com/errata/RHSA-2026:47757","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:76748","https://access.redhat.com/errata/RHSA-2026:76993","https://access.redhat.com/errata/RHSA-2026:80513","https://access.redhat.com/errata/RHSA-2026:82749","https://access.redhat.com/errata/RHSA-2026:82750","https://access.redhat.com/errata/RHSA-2026:82751","https://access.redhat.com/errata/RHSA-2026:82752","https://access.redhat.com/errata/RHSA-2026:82753","https://access.redhat.com/errata/RHSA-2026:82754","https://access.redhat.com/errata/RHSA-2026:82755","https://access.redhat.com/errata/RHSA-2026:82756","https://access.redhat.com/errata/RHSA-2026:82757","https://access.redhat.com/errata/RHSA-2026:82758","https://access.redhat.com/errata/RHSA-2026:82759","https://access.redhat.com/errata/RHSA-2026:82761","https://access.redhat.com/errata/RHSA-2026:82762","https://access.redhat.com/errata/RHSA-2026:82763","https://access.redhat.com/errata/RHSA-2026:82897","https://access.redhat.com/errata/RHSA-2026:82898","https://access.redhat.com/errata/RHSA-2026:82899","https://access.redhat.com/errata/RHSA-2026:82900","https://access.redhat.com/errata/RHSA-2026:82901","https://access.redhat.com/errata/RHSA-2026:82902","https://access.redhat.com/errata/RHSA-2026:82903","https://access.redhat.com/errata/RHSA-2026:82904","https://access.redhat.com/errata/RHSA-2026:82907","https://access.redhat.com/errata/RHSA-2026:82908","https://access.redhat.com/errata/RHSA-2026:82909","https://access.redhat.com/errata/RHSA-2026:82910","https://access.redhat.com/errata/RHSA-2026:82912","https://access.redhat.com/errata/RHSA-2026:82913","https://access.redhat.com/errata/RHSA-2026:82914","https://access.redhat.com/errata/RHSA-2026:82915","https://access.redhat.com/errata/RHSA-2026:82916","https://access.redhat.com/errata/RHSA-2026:82917","https://access.redhat.com/errata/RHSA-2026:82918","https://access.redhat.com/errata/RHSA-2026:82920","https://access.redhat.com/errata/RHSA-2026:82921","https://access.redhat.com/errata/RHSA-2026:82922","https://access.redhat.com/errata/RHSA-2026:82923","https://access.redhat.com/security/cve/CVE-2026-55655","https://bugzilla.redhat.com/show_bug.cgi?id=2462250"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-55655","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-23T12:21:42.502865Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-23T12:21:47.865Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:11:14.188Z"}}},"related_cves":[{"value":"CVE-2026-55655","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23046,"advisory_id":"43495b9d-fafb-4fca-aa77-7719af4dedf2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55653","source_published_at":"2026-06-23T03:36:22.741+00:00","published_at":"2026-10-25T06:12:28.539604+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-3","red-hat-openshift-ai-3-4","red-hat-openshift-ai-3-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-55653"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service","summary":"A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).","evidence":"cve:CVE-2026-55653","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-55653","aliases":["CVE-2026-55653"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.9p1-25.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.9p1-7.el10_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.7p1-45.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.3p1-6.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818589","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818496","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818502","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818602","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818598","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818587","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818778","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818627","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818790","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818874","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818792","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818662","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818877","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883722","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881612","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885618","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881487","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881732","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883315","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.1-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881486","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881769","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819252","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818749","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819206","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818979","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819123","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.14-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818901","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791820333","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rubin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819495","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819104","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:11:11.921Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:36759","https://access.redhat.com/errata/RHSA-2026:47755","https://access.redhat.com/errata/RHSA-2026:47756","https://access.redhat.com/errata/RHSA-2026:47757","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:76748","https://access.redhat.com/errata/RHSA-2026:76993","https://access.redhat.com/errata/RHSA-2026:80513","https://access.redhat.com/errata/RHSA-2026:82749","https://access.redhat.com/errata/RHSA-2026:82750","https://access.redhat.com/errata/RHSA-2026:82751","https://access.redhat.com/errata/RHSA-2026:82752","https://access.redhat.com/errata/RHSA-2026:82753","https://access.redhat.com/errata/RHSA-2026:82754","https://access.redhat.com/errata/RHSA-2026:82755","https://access.redhat.com/errata/RHSA-2026:82756","https://access.redhat.com/errata/RHSA-2026:82757","https://access.redhat.com/errata/RHSA-2026:82758","https://access.redhat.com/errata/RHSA-2026:82759","https://access.redhat.com/errata/RHSA-2026:82761","https://access.redhat.com/errata/RHSA-2026:82762","https://access.redhat.com/errata/RHSA-2026:82763","https://access.redhat.com/errata/RHSA-2026:82897","https://access.redhat.com/errata/RHSA-2026:82898","https://access.redhat.com/errata/RHSA-2026:82899","https://access.redhat.com/errata/RHSA-2026:82900","https://access.redhat.com/errata/RHSA-2026:82901","https://access.redhat.com/errata/RHSA-2026:82902","https://access.redhat.com/errata/RHSA-2026:82903","https://access.redhat.com/errata/RHSA-2026:82904","https://access.redhat.com/errata/RHSA-2026:82907","https://access.redhat.com/errata/RHSA-2026:82908","https://access.redhat.com/errata/RHSA-2026:82909","https://access.redhat.com/errata/RHSA-2026:82910","https://access.redhat.com/errata/RHSA-2026:82912","https://access.redhat.com/errata/RHSA-2026:82913","https://access.redhat.com/errata/RHSA-2026:82914","https://access.redhat.com/errata/RHSA-2026:82915","https://access.redhat.com/errata/RHSA-2026:82916","https://access.redhat.com/errata/RHSA-2026:82917","https://access.redhat.com/errata/RHSA-2026:82918","https://access.redhat.com/errata/RHSA-2026:82920","https://access.redhat.com/errata/RHSA-2026:82921","https://access.redhat.com/errata/RHSA-2026:82922","https://access.redhat.com/errata/RHSA-2026:82923","https://access.redhat.com/security/cve/CVE-2026-55653","https://bugzilla.redhat.com/show_bug.cgi?id=2462351"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-55653","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-23T14:30:51.025049Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-23T14:31:00.827Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:11:11.921Z"}}},"related_cves":[{"value":"CVE-2026-55653","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":24339,"next_before":23046}