VDB

RHSA-2025%3A3502

RHSA-2025%3A3502 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatodf4/ocs-metrics-exporter-rhel9@sha256:1b602bb5459440906a466e9687301dc3c1233264de86498c94f26581060f9033_amd64 as a component of RHODF 4.16 for RHEL 9*
Red Hatodf4/odf-cosi-sidecar-rhel9@sha256:d5b01a44782ed114af0d96a357faa2ce00950194f8a6c63a37081bb3bfa8550e_amd64 as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odf-prometheus-operator-bundle@sha256:c8c04af9ba9c10d8c32ac3c7004ba0c4ccf0c14ac683a1a685e97669ee387cca_s390x as a component of RHODF 4.16 for RHEL 9odf4/odf-prometheus-operator-bundle@sha256:c8c04af9ba9c10d8c32ac3c7004ba0c4ccf0c14ac683a1a685e97669ee387cca_s390x
Red Hatodf4/odf-prometheus-operator-bundle@sha256:f30254e9df41cf4049cc7b35610abd0a716a13f41a1c4523fc1e7bf2211085b0_amd64 as a component of RHODF 4.16 for RHEL 9odf4/odf-prometheus-operator-bundle@sha256:f30254e9df41cf4049cc7b35610abd0a716a13f41a1c4523fc1e7bf2211085b0_amd64
Red Hatodf4/odf-rhel9-operator@sha256:d917d45adf63e8659d589eee79ccb9d1623252b7339b1e93524b7dea229c8f09_ppc64le as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/ocs-client-rhel9-operator@sha256:6d1dc63e8040cbd6e82514ded593540a16f4dde956b04d88649551a4333e7616_s390x as a component of RHODF 4.16 for RHEL 9*
Red Hatodf4/odf-csi-addons-sidecar-rhel9@sha256:71a8e62888c5d7522d44045b373595ec4188c7946d60f1e2c8eb0f0e93954a03_arm64 as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odf-cli-rhel9@sha256:85ea82a8bcbbb0e39e5b8b5535f2468d3d61ab1507548acf9ba2a89777382483_arm64 as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/ocs-client-console-rhel9@sha256:409becedde385970154269f5dc84ac7961e219a1956930a14aa68183fb80fb49_ppc64le as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odf-operator-bundle@sha256:d900dff1d730a61b9f1eb78f4902bd233113216973874cd0c77e2d27b249dadb_s390x as a component of RHODF 4.16 for RHEL 9*
Red Hatodf4/ocs-metrics-exporter-rhel9@sha256:a0f521d4f1ac22e066a109ae38ae11e248195f9520c3730e5053b27da5e7eafd_s390x as a component of RHODF 4.16 for RHEL 9odf4/ocs-metrics-exporter-rhel9@sha256:a0f521d4f1ac22e066a109ae38ae11e248195f9520c3730e5053b27da5e7eafd_s390x
Red Hatodf4/odf-multicluster-rhel9-operator@sha256:8ec79d06669ee36eae6d6c2ed3ef835934ca6b5d6d27fc1ba524e17c5a2df2e3_amd64 as a component of RHODF 4.16 for RHEL 9odf4/odf-multicluster-rhel9-operator@sha256:8ec79d06669ee36eae6d6c2ed3ef835934ca6b5d6d27fc1ba524e17c5a2df2e3_amd64
Red Hatodf4/odr-recipe-operator-bundle@sha256:424de07f469a52d905d50a126e0d0c48e5c2a8bfcc5fa6be37f4b0c806cf50b5_amd64 as a component of RHODF 4.16 for RHEL 9odf4/odr-recipe-operator-bundle@sha256:424de07f469a52d905d50a126e0d0c48e5c2a8bfcc5fa6be37f4b0c806cf50b5_amd64
Red Hatodf4/odf-multicluster-rhel9-operator@sha256:20322293ce1012ddae0f395d5604e38a815e5da109bd11ac11e635c1773b1522_s390x as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odf-csi-addons-operator-bundle@sha256:d2bff2e8f293034a8a7d80a063d35d5ba3fdc279b0d03440c1d2a47ff2606adf_s390x as a component of RHODF 4.16 for RHEL 9odf4/odf-csi-addons-operator-bundle@sha256:d2bff2e8f293034a8a7d80a063d35d5ba3fdc279b0d03440c1d2a47ff2606adf_s390x
Red Hatodf4/odf-cli-rhel9@sha256:10aa2a02209ef8f37238f873edde98369e15e738b2a7b80099be4b2b8647edbc_s390x as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odr-recipe-operator-bundle@sha256:5045c0a773df2d4bff134934a4b61b3ed3653bce4bf1224495f71c14d0e34c7d_s390x as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/ocs-client-rhel9-operator@sha256:ac83a0734f93025f3ab42ee520e0445240d043a4775664c6d44a87c7fac71d68_ppc64le as a component of RHODF 4.16 for RHEL 9odf4/ocs-client-rhel9-operator@sha256:ac83a0734f93025f3ab42ee520e0445240d043a4775664c6d44a87c7fac71d68_ppc64le
Red Hatodf4/ocs-client-rhel9-operator@sha256:6d1dc63e8040cbd6e82514ded593540a16f4dde956b04d88649551a4333e7616_s390x as a component of RHODF 4.16 for RHEL 9*, *, *
Red Hatodf4/odf-cli-rhel9@sha256:bb1aec4a92322116499401febc6982178deee5e989fd68a9635d9b31f7dd8db2_amd64 as a component of RHODF 4.16 for RHEL 9odf4/odf-cli-rhel9@sha256:bb1aec4a92322116499401febc6982178deee5e989fd68a9635d9b31f7dd8db2_amd64

…and 178 more

Timeline

  • Apr 1, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 13, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›