VDB
RHSA-2026%3A5108
RHSA-2026%3A5108
PUBLISHED
CVSS 7.5 HIGH
A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer() processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying writer pipe to close. In affected versions, this leaves the Writer interface unusable and can disrupt logging functionality, potentially degrading application availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-ptp-operator@sha256:ac872adcf0109897aacb09a81a0287706bb5f16176bc84ba82ad35a1bf912acb_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-ptp-operator@sha256:ac872adcf0109897aacb09a81a0287706bb5f16176bc84ba82ad35a1bf912acb_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ead287184d4413b4b944f1bcd9b42208e80917c4c06e48f2743e1e965c5622b6_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ead287184d4413b4b944f1bcd9b42208e80917c4c06e48f2743e1e965c5622b6_arm64 |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b5d88413da2e663268f8a718a6a015aaecab164889ffeafd13ade74c442a1e01_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:e90c2a9e5e4739a19d7d1a473dbfdf82c470bcb5e18927755f08a8e71be8bf3c_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:e90c2a9e5e4739a19d7d1a473dbfdf82c470bcb5e18927755f08a8e71be8bf3c_arm64 |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:34361fc0092ea6b9195ce2154065b22ebe79bcda533d24e40ac98a571ddaf2ab_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:20b69899a39a31320607fddd8dac5785435123a8335791d7a254a48cde8c0978_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:514fe7f50baff74554683ffec40d5ff3e8a64fb8dbedb9cfc6584aedb29bd967_s390x as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:514fe7f50baff74554683ffec40d5ff3e8a64fb8dbedb9cfc6584aedb29bd967_s390x, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:d9ec6175f5bcdfe6f7455c492a069baa4f2e73a6759f06e03ba31722a896c0e9_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:d9ec6175f5bcdfe6f7455c492a069baa4f2e73a6759f06e03ba31722a896c0e9_arm64 |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:74af680b55c43da75aeb39e72aed0322ee2be6789b30e80a154a3aa99b1a71d5_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:74af680b55c43da75aeb39e72aed0322ee2be6789b30e80a154a3aa99b1a71d5_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel8@sha256:3c08d3974fc774c8c2da4d02aa4b9d646748655af24df4bfcdc6d8f15686fd91_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel8@sha256:3c08d3974fc774c8c2da4d02aa4b9d646748655af24df4bfcdc6d8f15686fd91_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:866de8b41c412cfb7f39b840276cc25b63192631b47e4499324ee2ef7cd5bf37_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:866de8b41c412cfb7f39b840276cc25b63192631b47e4499324ee2ef7cd5bf37_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:b339c5d39b0db799c64e1f54e49c2ec223e428c4e1f660a9063d12bcbb0caefd_s390x as a component of Red Hat OpenShift Container Platform 4.14 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:04e635ef5ab420ae3d3a58136ac50973748993043238dbc039c2f8ad5569f475_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:04e635ef5ab420ae3d3a58136ac50973748993043238dbc039c2f8ad5569f475_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:295e874f289cf84da81ade8033aee8cb08ea28725e861078d07d35d228d9371d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:295e874f289cf84da81ade8033aee8cb08ea28725e861078d07d35d228d9371d_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ead287184d4413b4b944f1bcd9b42208e80917c4c06e48f2743e1e965c5622b6_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ead287184d4413b4b944f1bcd9b42208e80917c4c06e48f2743e1e965c5622b6_arm64 |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b5d88413da2e663268f8a718a6a015aaecab164889ffeafd13ade74c442a1e01_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b5d88413da2e663268f8a718a6a015aaecab164889ffeafd13ade74c442a1e01_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:cb9aa92b01a6b521241f133c802ecd8cc4b2bdd95266295d27890168f77d3879_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel8@sha256:3a09d001667ee531b6d50db855f908bc0cc7d49406c38e0d5555db7a3470cf3e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:7b264c9441ac1a020f66f51a050dfa7455e2e47dc5ce6757b7f6b7f404d79336_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:7b264c9441ac1a020f66f51a050dfa7455e2e47dc5ce6757b7f6b7f404d79336_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:a7b2c26427316ad632cd3bbc40818ea4d8bc323160aafd10ca8d5d11f7db1131_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:a7b2c26427316ad632cd3bbc40818ea4d8bc323160aafd10ca8d5d11f7db1131_arm64, * |
…and 290 more
Timeline
- Mar 26, 2026 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- May 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:5108 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5108.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
- https://github.com/sirupsen/logrus/issues/1370 advisory
- https://github.com/sirupsen/logrus/pull/1376 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3 advisory
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 advisory