VDB

RHSA-2026:61685

RHSA-2026:61685 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:99e3e02b480e52027e8d6377d341d1fc0d75763f121cce8e2970f2ba86469c9e_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8f49765e9a1dc53760edaff262c3a14093ce0cb3d0379e138c9afc11ad7ecb03_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:963af09715a05902b5ecf985e8fa23fd9c505e7c7a067860f5bae06bbf9c37fe_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:60db6df6c112bfdafca2c56eacda79933e72c0eecc9d79c160122e83d0389c71_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0366297a7b0c0671cea1f55e3eef1e730ec53a60e99c8ada6f6e4f2b260de211_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:7977b6f00c93494847acd631548ec00910cbda21c398b181ccb3deb450bba115_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:5d4e4f162ce82934c13166d9fb46c80e6e2ba1917d3f54eb810a5f473df96b1b_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c01a0581d2ce48bb3bb26a3c84bd69ce0d5d837b4228efd537f69d5451733ace_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e20f6bf885ef5e85d22469e468f391c8ee5956cadb6643ee26585ef95e62926e_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6cb83cf7bb98b8e706c92095e0bbca4898ad7be7b31a23c96a6d99e87dbdaf1_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:eac4c207d7775e39c41dc486eb546aaaedb000c5436ba0223fe507efcab58a2e_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:474143e47ea4c0ef94238ad13906f99548e73496666929d8fc572ee8a5010cbf_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:022747e56f7488c4962f08e4ba6d339389b13560943e7370e3f9d83f97e29d62_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:38a6d3b97f97f607660779809e6e985662bff2af5859cf22c6a9bc5fd535c8fe_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:db72a1b9f3b473574ac21b44db165cfee74135a89e8fb05310523a28ae0c4a8b_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:8e21afd33da58142151b441b9be7524c813e7ff2d4bea5d0734333a8a7a3dce5_amd64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:118d1c2b58116c1de4ce34f0ae8300742461d75ea8b40dc10ad4ca7fccfd05cc_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b40ba092d9f581380b85d98da9d69d769a5deb7f4258edc0e07210ed9f65f543_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9b463d80349955520009955a452cd237eb9a1d0b37cb5c643262507a81fcbcc9_arm64 as a component of Red Hat Container Native Virtualization 4.16*
Red Hatregistry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7df62ab7ffb2fb1e8e358dcef67886a336f2df84ff4085116659d80e36d820f8_arm64 as a component of Red Hat Container Native Virtualization 4.16*

…and 6 more

Timeline

  • Aug 31, 2026 CVE Published
  • Oct 9, 2026 CVE Updated
  • Oct 9, 2026 Distribution Patch
  • Oct 9, 2026 Distribution Patch
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›