VDB
RHSA-2025%3A4712
RHSA-2025%3A4712
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, ".") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/network-tools-rhel9@sha256:45b69967b3b25335f0f1557a454de43ad1e4677568cdd15b11a3c0dbb8ce68e5_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/network-tools-rhel9@sha256:45b69967b3b25335f0f1557a454de43ad1e4677568cdd15b11a3c0dbb8ce68e5_s390x, openshift4/network-tools-rhel9@sha256:45b69967b3b25335f0f1557a454de43ad1e4677568cdd15b11a3c0dbb8ce68e5_s390x, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:c824bbb49e898764dc642494e6e00adba9eaee07fc312f2e1c534f7a42700e84_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-ovn-kubernetes-rhel9@sha256:c824bbb49e898764dc642494e6e00adba9eaee07fc312f2e1c534f7a42700e84_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:c824bbb49e898764dc642494e6e00adba9eaee07fc312f2e1c534f7a42700e84_s390x |
| Red Hat | openshift4/ose-cli-artifacts-rhel9@sha256:299700a5781bfa3a2e863c9fbb6c303e8c1981a80c9aebfd7726df0ae5b63b07_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cli-artifacts-rhel9@sha256:299700a5781bfa3a2e863c9fbb6c303e8c1981a80c9aebfd7726df0ae5b63b07_ppc64le, openshift4/ose-cli-artifacts-rhel9@sha256:299700a5781bfa3a2e863c9fbb6c303e8c1981a80c9aebfd7726df0ae5b63b07_ppc64le, openshift4/ose-cli-artifacts-rhel9@sha256:299700a5781bfa3a2e863c9fbb6c303e8c1981a80c9aebfd7726df0ae5b63b07_ppc64le |
| Red Hat | openshift4/ose-tools-rhel9@sha256:fa125cf9446f9baf57ef78d3eed7ecfa4299edf1acad72dcd17614c5425d9d4e_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-tools-rhel9@sha256:fa125cf9446f9baf57ef78d3eed7ecfa4299edf1acad72dcd17614c5425d9d4e_amd64, openshift4/ose-tools-rhel9@sha256:fa125cf9446f9baf57ef78d3eed7ecfa4299edf1acad72dcd17614c5425d9d4e_amd64, openshift4/ose-tools-rhel9@sha256:fa125cf9446f9baf57ef78d3eed7ecfa4299edf1acad72dcd17614c5425d9d4e_amd64 |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:badcb4dd7b0037c158e13c509f52f7858e10533592445ed9c703b24caef38f36_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-machine-config-rhel9-operator@sha256:badcb4dd7b0037c158e13c509f52f7858e10533592445ed9c703b24caef38f36_ppc64le, openshift4/ose-machine-config-rhel9-operator@sha256:badcb4dd7b0037c158e13c509f52f7858e10533592445ed9c703b24caef38f36_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:d368308c18e7a618ff3ad69e35b26e9bef248ae30e2f039f965f733f7cdca6ce_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:d368308c18e7a618ff3ad69e35b26e9bef248ae30e2f039f965f733f7cdca6ce_arm64, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:d368308c18e7a618ff3ad69e35b26e9bef248ae30e2f039f965f733f7cdca6ce_arm64, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:d368308c18e7a618ff3ad69e35b26e9bef248ae30e2f039f965f733f7cdca6ce_arm64 |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:66b8d9bd5f205db87267c8f2d92eac4d31a8e8e1b5a9f95f990c7bf693128aac_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-operator-registry-rhel9@sha256:66b8d9bd5f205db87267c8f2d92eac4d31a8e8e1b5a9f95f990c7bf693128aac_arm64, openshift4/ose-operator-registry-rhel9@sha256:66b8d9bd5f205db87267c8f2d92eac4d31a8e8e1b5a9f95f990c7bf693128aac_arm64 |
| Red Hat | openshift4/ose-tests-rhel9@sha256:d14502b201251e468ff0f1544ac709d00ca1e0d07fddd222df9d677e989d81f3_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-tests-rhel9@sha256:d14502b201251e468ff0f1544ac709d00ca1e0d07fddd222df9d677e989d81f3_s390x, openshift4/ose-tests-rhel9@sha256:d14502b201251e468ff0f1544ac709d00ca1e0d07fddd222df9d677e989d81f3_s390x, openshift4/ose-tests-rhel9@sha256:d14502b201251e468ff0f1544ac709d00ca1e0d07fddd222df9d677e989d81f3_s390x |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:5643941ed89f83b5b3d519b05674725f47905810f922402045c928051ef3e082_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-machine-config-rhel9-operator@sha256:5643941ed89f83b5b3d519b05674725f47905810f922402045c928051ef3e082_arm64, openshift4/ose-machine-config-rhel9-operator@sha256:5643941ed89f83b5b3d519b05674725f47905810f922402045c928051ef3e082_arm64, openshift4/ose-machine-config-rhel9-operator@sha256:5643941ed89f83b5b3d519b05674725f47905810f922402045c928051ef3e082_arm64 |
| Red Hat | openshift4/network-tools-rhel9@sha256:be1e6bc6a0c264904952cb5fc3faba09ed122bb86df71ed8bf83ae5938f7f931_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/network-tools-rhel9@sha256:be1e6bc6a0c264904952cb5fc3faba09ed122bb86df71ed8bf83ae5938f7f931_amd64, openshift4/network-tools-rhel9@sha256:be1e6bc6a0c264904952cb5fc3faba09ed122bb86df71ed8bf83ae5938f7f931_amd64 |
| Red Hat | openshift4/ose-tests-rhel9@sha256:2acec336750e247df3b3e0f3f867129324740fa0d2079991702c1e34993503db_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-tests-rhel9@sha256:2acec336750e247df3b3e0f3f867129324740fa0d2079991702c1e34993503db_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:a8b78fe1f52db401715e2c3ad02465a29b5e41862ed5c68e8e3b695240ccd99e_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/driver-toolkit-rhel9@sha256:a8b78fe1f52db401715e2c3ad02465a29b5e41862ed5c68e8e3b695240ccd99e_s390x, openshift4/driver-toolkit-rhel9@sha256:a8b78fe1f52db401715e2c3ad02465a29b5e41862ed5c68e8e3b695240ccd99e_s390x |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:5cb136f6d04be79d8c686fde4cc6e93bf3bd4dea57030bea19213991a80ffc82_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:fdad2b8b0a9a57a811dca24b842e7714349ee8d5f4fc145b84b5563213b49f43_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-etcd-rhel9@sha256:fdad2b8b0a9a57a811dca24b842e7714349ee8d5f4fc145b84b5563213b49f43_amd64, openshift4/ose-etcd-rhel9@sha256:fdad2b8b0a9a57a811dca24b842e7714349ee8d5f4fc145b84b5563213b49f43_amd64, * |
| Red Hat | openshift4/ose-installer-altinfra-rhel9@sha256:334308a8e636aa88a1e9c8eef816da061ad3d77f787cd6048a35cb32eb226dbe_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-altinfra-rhel9@sha256:334308a8e636aa88a1e9c8eef816da061ad3d77f787cd6048a35cb32eb226dbe_amd64, openshift4/ose-installer-altinfra-rhel9@sha256:334308a8e636aa88a1e9c8eef816da061ad3d77f787cd6048a35cb32eb226dbe_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:828f9ce899aa44927c7d8531a77677f1711b652eb5adf39543daab3c3921eb94_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:828f9ce899aa44927c7d8531a77677f1711b652eb5adf39543daab3c3921eb94_ppc64le, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:828f9ce899aa44927c7d8531a77677f1711b652eb5adf39543daab3c3921eb94_ppc64le |
| Red Hat | openshift4/ose-installer-altinfra-rhel9@sha256:32081b9e08c7f5173d60584c324a937d8e008a7d0a2f43244207c123192670da_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-altinfra-rhel9@sha256:32081b9e08c7f5173d60584c324a937d8e008a7d0a2f43244207c123192670da_ppc64le, *, openshift4/ose-installer-altinfra-rhel9@sha256:32081b9e08c7f5173d60584c324a937d8e008a7d0a2f43244207c123192670da_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:c73a9d4798fbfb390722d9f6639616578d2d7d13fc56e91c0a1ddafbf67d6168_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:c73a9d4798fbfb390722d9f6639616578d2d7d13fc56e91c0a1ddafbf67d6168_s390x, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:c73a9d4798fbfb390722d9f6639616578d2d7d13fc56e91c0a1ddafbf67d6168_s390x |
| Red Hat | openshift4/ose-must-gather-rhel9@sha256:d0779ea7e5e05596377209d4165c3493281dc0feae1352311d027e62947e265e_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-must-gather-rhel9@sha256:d0779ea7e5e05596377209d4165c3493281dc0feae1352311d027e62947e265e_s390x |
| Red Hat | openshift4/ose-operator-framework-tools-rhel9@sha256:3eba312094bced9e07ddccae610343fbe1fa17786fe85eeb466fa01bf45d4d76_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-operator-framework-tools-rhel9@sha256:3eba312094bced9e07ddccae610343fbe1fa17786fe85eeb466fa01bf45d4d76_amd64 |
…and 254 more
Timeline
- May 14, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 11, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:4712 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2347423 issue
- https://issues.redhat.com/browse/OCPBUGS-48403 advisory
- https://issues.redhat.com/browse/OCPBUGS-50582 advisory
- https://issues.redhat.com/browse/OCPBUGS-53427 advisory
- https://issues.redhat.com/browse/OCPBUGS-54616 advisory
- https://issues.redhat.com/browse/OCPBUGS-54626 advisory
- https://issues.redhat.com/browse/OCPBUGS-54765 advisory
- https://issues.redhat.com/browse/OCPBUGS-54865 advisory
- https://issues.redhat.com/browse/OCPBUGS-55005 advisory
- https://issues.redhat.com/browse/OCPBUGS-55121 advisory
- https://issues.redhat.com/browse/OCPBUGS-55177 advisory
- https://issues.redhat.com/browse/OCPBUGS-55230 advisory
- https://issues.redhat.com/browse/OCPBUGS-55354 advisory
- https://issues.redhat.com/browse/OCPBUGS-55373 advisory
- https://issues.redhat.com/browse/OCPBUGS-55428 advisory
- https://issues.redhat.com/browse/OCPBUGS-55435 advisory
- https://issues.redhat.com/browse/OCPBUGS-55449 advisory
- https://issues.redhat.com/browse/OCPBUGS-55473 advisory
…and 12 more