VDB
RHSA-2026:60302
RHSA-2026:60302
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:f727a05cc524fb8ef598670699e377f9734dba390cd46cd477528622a08a4d5f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:0b9810940430c06071822d88991824e441678e7cdb1616440fff423b4bc5aca9_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:3b014fe50e267ac28e5b0705308518f33cc488e2b0920eed8e88bb3205e4c0ea_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:e3752e7b721478533486a45c379df0808406ca4a4ec914b39a72efdc3496fc72_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9d5ee0d3a7d5b27e4ff100ec969074fe301864930e7d55f86a0a0aeb0eb97b9e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:b325df61353f3911c271c6ad354287d0224bd82d0789246b97ca1b4ac6211e9b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:841c9a5844ab3f8fd8f7b119b2a96a98648d9a517477348b743b3a93c85fb0a5_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:fb7a4bde97ed10122b03a9b9459d483a1f027a6cb240e11b627a6becb9072503_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:c6566082d022b473120cd59c489a7914d82936209bc69e1d55ff69df25ae4313_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:c36b98a728ebfd3ef0c2084eacb99cbe9cf95cd40ef9347f578c8b98a71f2928_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:a5ce22f2967c1ccb946939e3da4749ef4d55de9f77ff5c6df4dbf85476b2ec88_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:cfbf0b19b092c5349aaf8da84a4ad3d1f5ae57426ff8420965782e3a4fb27903_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:56f445ef1b60ff5389ed41210ec06abd37f7331c417f6d9db216d014922f5f28_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2f01d8c066419a15e1ffc0112c733d7a440e3092fcc5549ff20af22d910c2586_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:dafcd030401f1a5626b083600e8ae0e170945434e1411e37cc7d2c2bcc535533_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:ce11ff4bf304fb020a4588c2cba57c8d3b6ca4d6780c26bc7f24e70bc79eb964_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6cb13efa9d48915848b6621addce99cba613227a7301d9a3ca24e47a09463e73_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:678f3716136112e2295ffa8009cbae5ba6487b2cbba25e5ec18fee72efbb9c86_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:a106a987aabfb3f58ec062192a6393d0001406e002a4566130d5394192b0ee20_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:a1a1bb0b5d0a78e37cdb72e8213f6c43442562cdfdb8ba6597e15b64e2913681_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0 | * |
…and 110 more
Timeline
- Aug 26, 2026 CVE Published
- Oct 9, 2026 CVE Updated
- Oct 9, 2026 Distribution Patch
- Oct 9, 2026 Distribution Patch
- Oct 9, 2026 Security Advisory
- Oct 9, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:60302 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://catalog.redhat.com/software/containers/search advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60302.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2467822 issue
- https://www.cve.org/CVERecord?id=CVE-2026-33811 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33811 advisory
- https://go.dev/cl/767860 advisory
- https://go.dev/issue/78803 advisory
- https://groups.google.com/g/golang-announce/c/qcCIEXso47M advisory
- https://pkg.go.dev/vuln/GO-2026-4981 advisory