VDB
RHSA-2025%3A0678
RHSA-2025%3A0678
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/submariner-gateway-rhel8@sha256:b0158be34d11e566f60926ba0379608be51c873f6da05e21fee3bcce215493d0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-gateway-rhel8@sha256:b0158be34d11e566f60926ba0379608be51c873f6da05e21fee3bcce215493d0_ppc64le |
| Red Hat | rhacm2/submariner-rhel8-operator@sha256:384fe092d2686a8ea940b89dc5a127200898b96a6f9afaf5bce21c12f5a7bf67_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-route-agent-rhel8@sha256:1fc79f8cda5bf3aa9ed277d1b91fab46796cd4af1d5504fb265cd91c7aab77d7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-route-agent-rhel8@sha256:1fc79f8cda5bf3aa9ed277d1b91fab46796cd4af1d5504fb265cd91c7aab77d7_amd64 |
| Red Hat | rhacm2/submariner-gateway-rhel8@sha256:cb616c00be08ddc86d3b9ed91c7cdc2437b3302d84f0b078111146eda1b8cdbd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-operator-bundle@sha256:eb25249c004e9c8e54164146072f08f8ec6ea0a49f675c52fe4e3760701718cc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-operator-bundle@sha256:eb25249c004e9c8e54164146072f08f8ec6ea0a49f675c52fe4e3760701718cc_arm64 |
| Red Hat | rhacm2/lighthouse-agent-rhel8@sha256:cba309a798b1f0cbb06895a2b2010aea107d71ef9bdcefc6ad0c81bfe5cbb33f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/lighthouse-agent-rhel8@sha256:cba309a798b1f0cbb06895a2b2010aea107d71ef9bdcefc6ad0c81bfe5cbb33f_ppc64le |
| Red Hat | rhacm2/subctl-rhel8@sha256:94bba21b3ac146d90acae66a4338b6766699f5c21b05506d5b2b37e5b1ee51dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/subctl-rhel8@sha256:94bba21b3ac146d90acae66a4338b6766699f5c21b05506d5b2b37e5b1ee51dd_arm64 |
| Red Hat | rhacm2/submariner-operator-bundle@sha256:eb25249c004e9c8e54164146072f08f8ec6ea0a49f675c52fe4e3760701718cc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/nettest-rhel8@sha256:70bfed971bca255e2d7921d02587486779e42d2ebc0f8035f8bcaac6587cc26e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/nettest-rhel8@sha256:70bfed971bca255e2d7921d02587486779e42d2ebc0f8035f8bcaac6587cc26e_ppc64le |
| Red Hat | rhacm2/submariner-globalnet-rhel8@sha256:5014b7013ae0844adb7c8821f1c91d8f7a70c71e2958706a3451bccb377e080c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-globalnet-rhel8@sha256:5014b7013ae0844adb7c8821f1c91d8f7a70c71e2958706a3451bccb377e080c_arm64 |
| Red Hat | rhacm2/subctl-rhel8@sha256:94bba21b3ac146d90acae66a4338b6766699f5c21b05506d5b2b37e5b1ee51dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-operator-bundle@sha256:21a98e54b85f8a2b438d32587bbd20cf8d2174903ebe360bfa89c156658435fb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-gateway-rhel8@sha256:626ed479787d120bccf63f59ee9e8c8fff54c0d3d0fee12ce7e59f8d6d402f18_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-gateway-rhel8@sha256:626ed479787d120bccf63f59ee9e8c8fff54c0d3d0fee12ce7e59f8d6d402f18_arm64 |
| Red Hat | rhacm2/submariner-globalnet-rhel8@sha256:1e909ca27697d1d7ed47a034a430963f496ddb3005dd32f918b38031924c8092_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-globalnet-rhel8@sha256:1e909ca27697d1d7ed47a034a430963f496ddb3005dd32f918b38031924c8092_amd64 |
| Red Hat | rhacm2/submariner-route-agent-rhel8@sha256:fb749f29f7bf5bda2337b3112d69142cc05a19c1ad0123044d80dc7b05ebe184_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/submariner-route-agent-rhel8@sha256:fb749f29f7bf5bda2337b3112d69142cc05a19c1ad0123044d80dc7b05ebe184_s390x |
| Red Hat | rhacm2/submariner-route-agent-rhel8@sha256:fb749f29f7bf5bda2337b3112d69142cc05a19c1ad0123044d80dc7b05ebe184_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-route-agent-rhel8@sha256:1fc79f8cda5bf3aa9ed277d1b91fab46796cd4af1d5504fb265cd91c7aab77d7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/submariner-rhel8-operator@sha256:4c7f0070040c1324659798b12447c4602df54471060194c4fa517d696fd699ef_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/lighthouse-coredns-rhel8@sha256:be2bbfcbed28fcd72c78518d91ff47d2570748c4c293e3439defa3008a90ef94_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | * |
| Red Hat | rhacm2/subctl-rhel8@sha256:f63a9b68a116fc607341598cf97a5c222a6db233030c63e93414a30ad44df9ff_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, * |
…and 55 more
Timeline
- Jan 23, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:0678 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0678.json advisory
- https://access.redhat.com/security/cve/CVE-2024-45338 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45338 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45338 advisory
- https://go.dev/cl/637536 advisory
- https://go.dev/issue/70906 advisory
- https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3333 advisory