VDB
RHSA-2025%3A22784
RHSA-2025%3A22784
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A denial of service flaw has been discovered in the quic-go golang library. A misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:fa636c3568f8e06bae8e929d0f2f5c0fe946ea9edd4a1450c9e4a40b9504f226_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:fa636c3568f8e06bae8e929d0f2f5c0fe946ea9edd4a1450c9e4a40b9504f226_amd64 |
| Red Hat | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:090e0f16922f120fd77bab93cf939103214e2999777e87c1211013a2990a1b61_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:090e0f16922f120fd77bab93cf939103214e2999777e87c1211013a2990a1b61_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:61c07e4f0d9a89434bc7bfa540af63f60ab11ef984475c61a6358f808e33b84f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:61c07e4f0d9a89434bc7bfa540af63f60ab11ef984475c61a6358f808e33b84f_arm64 |
| Red Hat | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:18b44b16fe949d6581538d3fdce3e6fe695665009bde0785fa3ce6b73013b73e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:18b44b16fe949d6581538d3fdce3e6fe695665009bde0785fa3ce6b73013b73e_amd64 |
| Red Hat | registry.redhat.io/rhacm2/subctl-rhel9@sha256:f8a5da344035ab1f52a99ce7c6507dbb4b659ccdae86111f447dfde293493c68_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/subctl-rhel9@sha256:f8a5da344035ab1f52a99ce7c6507dbb4b659ccdae86111f447dfde293493c68_amd64 |
| Red Hat | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:840ba88bd309c24b62b247a061c451c51636db5c20117a001b6a7bd47d62ce14_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:840ba88bd309c24b62b247a061c451c51636db5c20117a001b6a7bd47d62ce14_arm64 |
| Red Hat | registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:2fc9641d4fbb7e72d26c430f40df019be653d82b701fc396f323a4c75bf6590a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:2fc9641d4fbb7e72d26c430f40df019be653d82b701fc396f323a4c75bf6590a_amd64 |
| Red Hat | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:65b83ad740bf6ff468e8f60dcd0d0fbe5deee7c15758e350b0b222bb846e5e78_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:65b83ad740bf6ff468e8f60dcd0d0fbe5deee7c15758e350b0b222bb846e5e78_arm64 |
| Red Hat | registry.redhat.io/rhacm2/subctl-rhel9@sha256:c234817a3f793465a2c6603c30aecc031968fb5e9ca7d5c953c90f4fc34ad6ad_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/subctl-rhel9@sha256:c234817a3f793465a2c6603c30aecc031968fb5e9ca7d5c953c90f4fc34ad6ad_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:93abd49808ae61f715ee2723f7e90afd5c951ea2d84753b5fc5612639d983a57_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:93abd49808ae61f715ee2723f7e90afd5c951ea2d84753b5fc5612639d983a57_arm64 |
| Red Hat | registry.redhat.io/rhacm2/subctl-rhel9@sha256:859c79b8ed5cc0c2cd08296a0e97c9b76ac177f8b6514854b82699202abbb8d0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/subctl-rhel9@sha256:859c79b8ed5cc0c2cd08296a0e97c9b76ac177f8b6514854b82699202abbb8d0_s390x |
| Red Hat | registry.redhat.io/rhacm2/nettest-rhel9@sha256:89c48c19711ee7ac518ff484dcac0c8a74d6c3afcda70cdd8deae2e7bafe909b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/nettest-rhel9@sha256:89c48c19711ee7ac518ff484dcac0c8a74d6c3afcda70cdd8deae2e7bafe909b_arm64 |
| Red Hat | registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:b8a68b8899fd07f8c7e9116ce1757f9adad12c8e93a5f64da0b6ba22c758d1af_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:b8a68b8899fd07f8c7e9116ce1757f9adad12c8e93a5f64da0b6ba22c758d1af_amd64 |
| Red Hat | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:7632479daaab6738e0795a1714f6cf2fbf7e05d9727d5260651e473b6b27aaf1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:7632479daaab6738e0795a1714f6cf2fbf7e05d9727d5260651e473b6b27aaf1_s390x |
| Red Hat | registry.redhat.io/rhacm2/subctl-rhel9@sha256:ea4f9e4dea3e043a550a87b105fc6792e2e201fc3dc59b07b1411652ad0438ae_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:e7c3aa133fb2e5c05ffddc0045014232cedc0df9a2686b4df5dc712cbd8664c7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:e7c3aa133fb2e5c05ffddc0045014232cedc0df9a2686b4df5dc712cbd8664c7_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:953d94d12043a1a44249e9530b273a1d83463ef7fe87836b3d99a96ae173dd1d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:953d94d12043a1a44249e9530b273a1d83463ef7fe87836b3d99a96ae173dd1d_ppc64le |
| Red Hat | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:061bd1844f1cf24d43387986e441063d8666932f1a538d2d5d372ad467f95c43_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:061bd1844f1cf24d43387986e441063d8666932f1a538d2d5d372ad467f95c43_amd64 |
| Red Hat | registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4c16776f78009d170a45571663a33ded28d8fc91a4461a7f841052fa8c16c3ce_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4c16776f78009d170a45571663a33ded28d8fc91a4461a7f841052fa8c16c3ce_arm64 |
| Red Hat | registry.redhat.io/rhacm2/nettest-rhel9@sha256:e642c43f0ccd6f37a30457f7056fd6900329574d490ee34c1aec214eb8f062ea_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | registry.redhat.io/rhacm2/nettest-rhel9@sha256:e642c43f0ccd6f37a30457f7056fd6900329574d490ee34c1aec214eb8f062ea_amd64 |
…and 7 more
Timeline
- Dec 4, 2025 CVE Published
- Apr 29, 2026 CVE Updated
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:22784 advisory
- https://access.redhat.com/security/cve/CVE-2025-59530 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22784.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2403125 issue
- https://www.cve.org/CVERecord?id=CVE-2025-59530 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-59530 advisory
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685 advisory
- https://github.com/quic-go/quic-go/pull/5354 advisory
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw advisory