VDB

RHSA-2025%3A16483

RHSA-2025%3A16483 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/virt-operator@sha256:5158fca2bc3ad7587d6c36c903de7a615b00442533900ea4b63a87ca31d614ef_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/virt-operator@sha256:5158fca2bc3ad7587d6c36c903de7a615b00442533900ea4b63a87ca31d614ef_amd64
Red Hatcontainer-native-virtualization
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-operator@sha256:866118341df87d5cec4956c753440b258afba6fbab1352dc4d098e17a9a65ab4_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:866118341df87d5cec4956c753440b258afba6fbab1352dc4d098e17a9a65ab4_amd64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:3dc3ce76a7ccaa7798fec54c3ccb2804de90c1ff5c2436cf328b89ab01d7e5a8_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:3dc3ce76a7ccaa7798fec54c3ccb2804de90c1ff5c2436cf328b89ab01d7e5a8_amd64
Red Hatcontainer-native-virtualization/virt-cdi-cloner@sha256:1d1a606ea40ab30624c4c5bcfd2536c085127c9f21bef1552909a7131a4ef443_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/virt-exportserver@sha256:2c192c5a265c6a54c3a8b3126c2cd446090266b7e9178d0462fe27caf6943356_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/libguestfs-tools@sha256:a768dc480b25d6f0e43affa4dd149cf63bee29deced8bc3ee609091c81ec2d2c_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/libguestfs-tools@sha256:a768dc480b25d6f0e43affa4dd149cf63bee29deced8bc3ee609091c81ec2d2c_amd64
Red Hatcontainer-native-virtualization/ovs-cni-plugin@sha256:2f5c8cb7eb1c0175f39eb8679db51aff8ca8d17e4c2c88c7e13a7fa1baac4ce2_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:fcf05ebb9b1806f8afec41e1e46effbdf375d1141dd601878586d8ab65bfc2ae_amd64 as a component of CNV 4.12 for RHEL 8*
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f76ec4cbf6096e9b5bda0cf8086f36215f4a917c2b2c829113c4391e8a9d15bc_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:f76ec4cbf6096e9b5bda0cf8086f36215f4a917c2b2c829113c4391e8a9d15bc_amd64
Red Hatcontainer-native-virtualization/virt-artifacts-server@sha256:078f3d2416d96c065ccbcb17b15c950c7a5704f8e780a1a45a00cd68910004dc_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/virt-artifacts-server@sha256:078f3d2416d96c065ccbcb17b15c950c7a5704f8e780a1a45a00cd68910004dc_amd64
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:1b7672c255ebdb9c6eef2b2ac6486a72ba500a2d97e79418ebd3b9c916388e01_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:cd6de3b312ebfcac4c0e1e90c01449edbc70d52db93f1d635725ecf087f7b19a_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/virt-cdi-controller@sha256:efb757267913b1324f4de94a271aab875546294d847ca04ce368f9060b0ab6c8_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/vm-network-latency-checkup@sha256:6fb5b09e9be5a7cf2450bafeff3ed6a03203630dc339aea7e4e86b0443f39a27_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/virt-cdi-uploadproxy@sha256:e376ab7320ec9ff14eaf7a48a1dd27aa81936d41e99e146746bdf11724aed961_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/virt-cdi-uploadproxy@sha256:e376ab7320ec9ff14eaf7a48a1dd27aa81936d41e99e146746bdf11724aed961_amd64
Red Hatcontainer-native-virtualization/kubevirt-ssp-operator@sha256:468226d63a8a3a5e4704175cd674e6adc21f54578d6bd2be3adf13462adf539a_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:8b2966897b29151706b46b96374be2d9a7da5d747e93cbeb036cea2a67b9eeab_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/virt-handler@sha256:0478a9a178c44b9410a7d0cf3f21b17673c987bff1ead3bc241fa34d087d4e64_amd64 as a component of CNV 4.12 for RHEL 8*, *, *
Red Hatcontainer-native-virtualization/virt-handler@sha256:0478a9a178c44b9410a7d0cf3f21b17673c987bff1ead3bc241fa34d087d4e64_amd64 as a component of CNV 4.12 for RHEL 8container-native-virtualization/virt-handler@sha256:0478a9a178c44b9410a7d0cf3f21b17673c987bff1ead3bc241fa34d087d4e64_amd64

…and 69 more

Timeline

  • Sep 23, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 19, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›