VDB

RHSA-2025%3A1838

RHSA-2025%3A1838 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/ovs-cni-plugin-rhel9@sha256:08baf1d37a8728f352c4283318f8d2b6b2888d73c72c2b23df223ba15b6f7ab7_arm64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/ovs-cni-plugin-rhel9@sha256:08baf1d37a8728f352c4283318f8d2b6b2888d73c72c2b23df223ba15b6f7ab7_arm64
Red Hatcontainer-native-virtualization/kubevirt-api-lifecycle-automation-rhel9@sha256:9450eef88bfd7486d51a28fd6266ef73ac6a71490d90b050b3c0ddf7c2386546_arm64 as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/virt-cdi-importer-rhel9@sha256:bf21f31a6089bf3b517ebbcb751357d1df6d6abc857b3f6ecd5c5676527deab8_arm64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/virt-cdi-importer-rhel9@sha256:bf21f31a6089bf3b517ebbcb751357d1df6d6abc857b3f6ecd5c5676527deab8_arm64
Red Hatcontainer-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:449c363dc23ecb713bfd9e944962a13197366e83d729eedd8006dcb43e6e4f37_arm64 as a component of CNV 4.18 for RHEL 9*
Red Hatcontainer-native-virtualization/kubevirt-console-plugin-rhel9@sha256:91ce70679c96e7693bc427944fd9724d72ae3e4f601ceb4c64a0292efc5c3fcc_amd64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:91ce70679c96e7693bc427944fd9724d72ae3e4f601ceb4c64a0292efc5c3fcc_amd64
Red Hatcontainer-native-virtualization/pr-helper-rhel9@sha256:6429729f804bc5898f31c164b9b998ed6197d8f8c55b63e053fe27dbb904dd33_s390x as a component of CNV 4.18 for RHEL 9container-native-virtualization/pr-helper-rhel9@sha256:6429729f804bc5898f31c164b9b998ed6197d8f8c55b63e053fe27dbb904dd33_s390x
Red Hatcontainer-native-virtualization/kubevirt-api-lifecycle-automation-rhel9@sha256:997d0ab53a55d2bf9520ab7ff4e21fd5f5d06ce8f0dd84fe6452cdd2266ca646_s390x as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/wasp-agent-rhel9@sha256:3d9c5138107119da2466cf779240d4f8271f3501afe188904c971d387dd44aa1_arm64 as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:f09675f45ff7d22592df836b36b4e30326043347348d97305be9bc9b6a932c79_amd64 as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/aaq-server-rhel9@sha256:f3bc56c6a546423780506ecc0977525b9d7b1500531d775601f8967248c25338_amd64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/aaq-server-rhel9@sha256:f3bc56c6a546423780506ecc0977525b9d7b1500531d775601f8967248c25338_amd64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:0657930502b8f4f49c67a2a5bcad4cd4d2a7de33019e0d2d6910e5cc4d3bceaf_amd64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:0657930502b8f4f49c67a2a5bcad4cd4d2a7de33019e0d2d6910e5cc4d3bceaf_amd64
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:685156ca2d9a9d1ba20a9799ec9d102410be3120ba2609e702fb4fa272a4701c_arm64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:685156ca2d9a9d1ba20a9799ec9d102410be3120ba2609e702fb4fa272a4701c_arm64
Red Hatcontainer-native-virtualization/virt-handler-rhel9@sha256:bb26c31f18af53a7610b542b09496280524ace6da9ec52bc2ba8a34eb6008efb_amd64 as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:d4d04a6620649bd2acb87ed76529812270de84589de58cb70a9ed0d88e7acbae_s390x as a component of CNV 4.18 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:d4d04a6620649bd2acb87ed76529812270de84589de58cb70a9ed0d88e7acbae_s390x
Red Hatcontainer-native-virtualization/virt-api-rhel9@sha256:13f51b60c7a31de270813486061190e18174c7578a59f0fc0ef07a8458e3c15a_arm64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/virt-api-rhel9@sha256:13f51b60c7a31de270813486061190e18174c7578a59f0fc0ef07a8458e3c15a_arm64
Red Hatcontainer-native-virtualization/kubemacpool-rhel9@sha256:5cbe60963a89cffbf13ea05f96561f3dabcee8f0106e8c741fa5553db7e1ab43_arm64 as a component of CNV 4.18 for RHEL 9container-native-virtualization/kubemacpool-rhel9@sha256:5cbe60963a89cffbf13ea05f96561f3dabcee8f0106e8c741fa5553db7e1ab43_arm64
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:ff23f496433e009656938b6e6833c4a4a40453d360b4f91f8052e517b51a11be_s390x as a component of CNV 4.18 for RHEL 9container-native-virtualization/hostpath-provisioner-rhel9@sha256:ff23f496433e009656938b6e6833c4a4a40453d360b4f91f8052e517b51a11be_s390x
Red Hatcontainer-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:8ea06d9a12426c09b7bdfed03a93a6e0326c365ede44bc1fa4631e338ff5ca35_s390x as a component of CNV 4.18 for RHEL 9container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:8ea06d9a12426c09b7bdfed03a93a6e0326c365ede44bc1fa4631e338ff5ca35_s390x
Red Hatcontainer-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:a56e1909e76e3a3fcfd72c961cfd5970c7884be24458c86dad4c6c0949a29860_arm64 as a component of CNV 4.18 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3e0a286649e9b26b08dda134669a162289d831cb4576a0b5c92edbf501d8c1d9_amd64 as a component of CNV 4.18 for RHEL 9*, *, *

…and 301 more

Timeline

  • Feb 25, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 13, 2026 CVE Updated

References

…and 145 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›