VDB

RHSA-2025%3A0048

RHSA-2025%3A0048 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/virt-controller-rhel9@sha256:cf04cfa75451109ec2e39ec5eb44b676a22d4937a1c25277d1ab68f627992d7a_arm64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/virt-controller-rhel9@sha256:cf04cfa75451109ec2e39ec5eb44b676a22d4937a1c25277d1ab68f627992d7a_arm64
Red Hatcontainer-native-virtualization/kubevirt-common-instancetypes-rhel9@sha256:7015342422b3012306ae866ecc5d108db894619718a51eb1aee18a343aaac27a_amd64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/kubevirt-common-instancetypes-rhel9@sha256:7015342422b3012306ae866ecc5d108db894619718a51eb1aee18a343aaac27a_amd64
Red Hatcontainer-native-virtualization/multus-dynamic-networks-rhel9@sha256:2e7cf0f142dea63c19932715d82ddf07ebb27de577a4fd1de5da7333ec09562f_arm64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/multus-dynamic-networks-rhel9@sha256:2e7cf0f142dea63c19932715d82ddf07ebb27de577a4fd1de5da7333ec09562f_arm64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:59f6e344445e9edc5d9c8752517aba2fa9b9eba98cc895b1c24aded318654ead_arm64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:87ca8ff8758e87c0ed800aa6e7e298a622e9a0e96b85c863d6e73091a6c8bee2_arm64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/kubemacpool-rhel9@sha256:b1d7371658df9ef066132509b0b088d2e812fed100d10a6246bf1497db452979_arm64 as a component of CNV 4.17 for RHEL 9*
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:18f32d75ae52344d06d26ef973ba0d3a46ff1a3dd1adef6c69fab6e740462351_arm64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/hostpath-provisioner-rhel9@sha256:18f32d75ae52344d06d26ef973ba0d3a46ff1a3dd1adef6c69fab6e740462351_arm64
Red Hatcontainer-native-virtualization/aaq-controller-rhel9@sha256:cc3b097a083d3265372704174de2f226e7e4f7c5b6e752038b5347e0b46cff6f_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:3773ae1ab1b8df8c0866abd2a7a0b932233258b1b45373a758efc428a69eb47d_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/kubesecondarydns-rhel9@sha256:b8fee27947cee0f203cdfb4ad7e133926e2644196db507972fbb4cd942a1cb6a_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/kubesecondarydns-rhel9@sha256:b8fee27947cee0f203cdfb4ad7e133926e2644196db507972fbb4cd942a1cb6a_amd64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/kubesecondarydns-rhel9@sha256:b8fee27947cee0f203cdfb4ad7e133926e2644196db507972fbb4cd942a1cb6a_amd64
Red Hatcontainer-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:fad2812ac06011ba2919e9e11ac0f68301ab933b1761079717735463cc71fab7_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:3773ae1ab1b8df8c0866abd2a7a0b932233258b1b45373a758efc428a69eb47d_amd64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:3773ae1ab1b8df8c0866abd2a7a0b932233258b1b45373a758efc428a69eb47d_amd64
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:faad8963b607e473f6c988a715cd6450d9515cdb489c28b01a393da53fce13d3_amd64 as a component of CNV 4.17 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-artifacts-server-rhel9@sha256:8509ddde2952975996ed2d66ff3092e3c48c2207ecc1822f09f742232bce7d81_arm64 as a component of CNV 4.17 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-exportproxy-rhel9@sha256:0205b95d4a03efeca8a13a72070c7b7824f547e739d9bf78dd57f969c5ad8b6c_arm64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/cluster-network-addons-operator-rhel9@sha256:69e0c1f26f9155be9086e15adc0f33d3fd3107ced1b3444a7afb216d5e040a77_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/virt-launcher-rhel9@sha256:1acfa733ffb0805e90fc5d9927abbeac5ffa8bc0a5e7c268d95309bd28449e60_arm64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:f1b5deaef13b1e50b43801e04d8acfd4b36c4d6bde26caccd0016065c14923cd_amd64 as a component of CNV 4.17 for RHEL 9*, *
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:4c53479e1d1b445554ce32974971e711530e960995c916348780bc14bf448cf7_amd64 as a component of CNV 4.17 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:4c53479e1d1b445554ce32974971e711530e960995c916348780bc14bf448cf7_amd64

…and 190 more

Timeline

  • Jan 7, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 19, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›