VDB

RHSA-2025%3A2658

RHSA-2025%3A2658 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:d0ff0f17e6b409f69dfb867fb3f3e42349838fac81b0ecb44f9a99321577ee14_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:d0ff0f17e6b409f69dfb867fb3f3e42349838fac81b0ecb44f9a99321577ee14_amd64
Red Hatcontainer-native-virtualization/vm-network-latency-checkup-rhel9@sha256:fe907b777473a17cf266a2afe5cf50f34c96b9e83cae198e08bcb3b9db3bef06_amd64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/hco-bundle-registry-rhel9@sha256:6a9873fa23416c1d036f9e625a1e20a3eac8b5f70a91c583e1e08c86fc53fe2e_amd64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-storage-checkup-rhel9@sha256:4a348d2dcf7e1088bfd2a37f7826ff8ecf0ca26cf64a90985dbfe5fa68b96b0b_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-cdi-importer-rhel9@sha256:d23e6d3feeb2826083f0ba72d62cbf3aa307080dd84f333f2c56aae850a1ce6b_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-importer-rhel9@sha256:d23e6d3feeb2826083f0ba72d62cbf3aa307080dd84f333f2c56aae850a1ce6b_arm64
Red Hatcontainer-native-virtualization/kubevirt-template-validator-rhel9@sha256:1e561a41c65c72976ec36bd7d625ad4a4dcb93bfd5b9c7ff2cc6a4862f03d17e_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubevirt-template-validator-rhel9@sha256:1e561a41c65c72976ec36bd7d625ad4a4dcb93bfd5b9c7ff2cc6a4862f03d17e_arm64
Red Hatcontainer-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:45a2c5606ecd3af871ac2b6adf6aeaa170483708afb7e307d7b93fe61537cdd5_arm64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:4df0b706ec40aa31b663f286cbf355624f42042abdd637f2881f195d9cf852a2_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-launcher-rhel9@sha256:a92fb14e500402c0218416727cfd6ce2b41a46eb35023992571a62c7249cff75_arm64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:9f391178bd44bddb3b0069fd4a60b44eef780aac6303d65174e7f2cc63a86a9a_amd64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/virt-exportserver-rhel9@sha256:d805aaac9a2b55efb1d2d037807710d09efd0411c649a0393c4636ee0ad961e6_amd64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:fd29d43e06aa04ef92069cc8dc1a0b1421cff3ddc725f92e91b0dad0f7d7461a_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:fd29d43e06aa04ef92069cc8dc1a0b1421cff3ddc725f92e91b0dad0f7d7461a_amd64
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:65b7923b5039d38347385e207fc0379ce712ebbf1b3fbbad823880e786753cb0_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hostpath-csi-driver-rhel9@sha256:65b7923b5039d38347385e207fc0379ce712ebbf1b3fbbad823880e786753cb0_arm64
Red Hatcontainer-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:23776b581d794ea54367dfd946ea55d6f38b78465b4f838360b83c968b3ff943_arm64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/aaq-controller-rhel9@sha256:1093f0dc6c9b9c41fe6adf8ac3e90b2a416f8e4acfb4db9528f57fc2e470f6f2_arm64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:c8ae94c28b56a7a72f2fe249df5944b5a56fa7d10c65b8a5a0016d241c8eb1d7_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:c8ae94c28b56a7a72f2fe249df5944b5a56fa7d10c65b8a5a0016d241c8eb1d7_arm64
Red Hatcontainer-native-virtualization/mtq-operator-rhel9@sha256:583d20c3e6898692b57ad838dcae5a993617df738e14c05395d28e572406dd49_arm64 as a component of CNV 4.15 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/virt-exportserver-rhel9@sha256:b1a184eba121a3a99145cff08eeb68bfd92b9f29868942022fad083ee57f173a_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-exportserver-rhel9@sha256:b1a184eba121a3a99145cff08eeb68bfd92b9f29868942022fad083ee57f173a_arm64
Red Hatcontainer-native-virtualization/pr-helper-rhel9@sha256:6a3079b5b1350218ad3764ed872f9d39318bddb4d2132aea043d111ff56582c7_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/mtq-lock-server-rhel9@sha256:ee77fbe272b16db2dac0eaebbe538596fd4e5fa6bc2c334eb3b4ca2e4db04315_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/mtq-lock-server-rhel9@sha256:ee77fbe272b16db2dac0eaebbe538596fd4e5fa6bc2c334eb3b4ca2e4db04315_amd64

…and 182 more

Timeline

  • Mar 11, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 13, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›