VDB
RHSA-2026%3A0327
RHSA-2026%3A0327
PUBLISHED
CVSS 7.5 HIGH
A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer() processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying writer pipe to close. In affected versions, this leaves the Writer interface unusable and can disrupt logging functionality, potentially degrading application availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-cluster-update-keys-rhel9@sha256:322423d85e6f0c49af2a133d0ce3b2dd8dff6f590364b49eb7305cc90c95ea9f_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:865c579ffbf6269d8491ed0a60d56da08d680f41472934f1992ff106069d4682_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:865c579ffbf6269d8491ed0a60d56da08d680f41472934f1992ff106069d4682_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:95c81b9f4314033e0db920d26fd458553f1d32de2e94f7ec6280a97bf87b970d_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:95c81b9f4314033e0db920d26fd458553f1d32de2e94f7ec6280a97bf87b970d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a8ed4d31886431f6652d7a818081f6461c9f4cf708232e1b6cdb2828c22e741f_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a8ed4d31886431f6652d7a818081f6461c9f4cf708232e1b6cdb2828c22e741f_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-version-rhel9-operator@sha256:4c7b5854b0eed9015e784561f99823eb4cc8afabcd524acb37acede8259831d8_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-version-rhel9-operator@sha256:4c7b5854b0eed9015e784561f99823eb4cc8afabcd524acb37acede8259831d8_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:51ba4886a8eb2be2c540a8761126874e03209066c912eb315de0bc5659e2f9e6_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9@sha256:67dbebb4e04b267b71f6d48623d2612f2ea51a1e2d6d10ad9386336a47f9116b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9@sha256:67dbebb4e04b267b71f6d48623d2612f2ea51a1e2d6d10ad9386336a47f9116b_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:3db2e9a0af4199d7881d53ac40abdb15fd198f4ed0d87e5bd01f58adb3359011_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:3db2e9a0af4199d7881d53ac40abdb15fd198f4ed0d87e5bd01f58adb3359011_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:73c4d1a1b9db3e369263e77728a92b89ea6e03d7b29c844ca83ea6f179df0140_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:73c4d1a1b9db3e369263e77728a92b89ea6e03d7b29c844ca83ea6f179df0140_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:bc87ee80c823f65171b214d154ee7cfe68e7642be8de366ddc500d8035415110_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:bc87ee80c823f65171b214d154ee7cfe68e7642be8de366ddc500d8035415110_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-samples-rhel9-operator@sha256:b10e5023f52db1f56af89fca242b92279a681fb1b5d5d3db46d9e38ca9efa729_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:650e1233b428da23a578e7d0a0e2a801c5b45b5250d1ec569db6f72baaeb862d_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-networkpolicy-rhel9@sha256:8aa7ed397945e7376a0fe4089bafd8688cc63377d78d994aeed012e903ebbe51_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:2493cc19ecf6de30980aa1343ae72f9f67abca9e60c45dd9701e3654a49a8751_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:2493cc19ecf6de30980aa1343ae72f9f67abca9e60c45dd9701e3654a49a8751_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:42fdc5ed04c4407565de98045ac46a1e1f2671070ad7d87b1929a55fb63ac5fa_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9@sha256:989960cff56e35b3561de569f034d4e8c41f34d8f056218394ae6574f03e02bf_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:e6bd84eb7c59ec23360039f1c586f2d2516c12fa416156630611b62c5e8e4a4c_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:e6bd84eb7c59ec23360039f1c586f2d2516c12fa416156630611b62c5e8e4a4c_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:51ba4886a8eb2be2c540a8761126874e03209066c912eb315de0bc5659e2f9e6_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:51ba4886a8eb2be2c540a8761126874e03209066c912eb315de0bc5659e2f9e6_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-pod-rhel9@sha256:5168b417cf23e9a90ceeb9b42c15c5579a203de69294f63f392251bec41f3dd7_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-pod-rhel9@sha256:5168b417cf23e9a90ceeb9b42c15c5579a203de69294f63f392251bec41f3dd7_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:7623d4b6acace64aeb4b462df5690b5468c75a16b97eaf5c6250868ea2a5922f_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:7623d4b6acace64aeb4b462df5690b5468c75a16b97eaf5c6250868ea2a5922f_s390x |
…and 1300 more
Timeline
- Jan 15, 2026 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:0327 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0327.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
- https://github.com/sirupsen/logrus/issues/1370 advisory
- https://github.com/sirupsen/logrus/pull/1376 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3 advisory
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 advisory