VDB
RHSA-2026:62260
RHSA-2026:62260
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30 | *, *, * |
| Red Hat | registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x as a component of Red Hat OpenShift Dev Spaces 3.30 | *, *, * |
| Red Hat | registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
| Red Hat | registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x as a component of Red Hat OpenShift Dev Spaces 3.30 | *, *, * |
| Red Hat | registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x as a component of Red Hat OpenShift Dev Spaces 3.30 | * |
…and 45 more
Timeline
- Sep 1, 2026 CVE Published
- Oct 1, 2026 CVE Updated
- Oct 1, 2026 Distribution Patch
- Oct 1, 2026 Distribution Patch
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
- Oct 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:62260 advisory
- https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.30/html/administration_guide/installing-devspaces advisory
- https://access.redhat.com/security/cve/CVE-2025-55163 advisory
- https://access.redhat.com/security/cve/CVE-2026-10050 advisory
- https://access.redhat.com/security/cve/CVE-2026-10051 advisory
- https://access.redhat.com/security/cve/CVE-2026-12143 advisory
- https://access.redhat.com/security/cve/CVE-2026-12151 advisory
- https://access.redhat.com/security/cve/CVE-2026-13149 advisory
- https://access.redhat.com/security/cve/CVE-2026-15075 advisory
- https://access.redhat.com/security/cve/CVE-2026-15076 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-34986 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-39831 advisory
- https://access.redhat.com/security/cve/CVE-2026-39835 advisory
- https://access.redhat.com/security/cve/CVE-2026-40898 advisory
- https://access.redhat.com/security/cve/CVE-2026-40983 advisory
- https://access.redhat.com/security/cve/CVE-2026-40984 advisory
- https://access.redhat.com/security/cve/CVE-2026-41242 advisory
- https://access.redhat.com/security/cve/CVE-2026-41695 advisory
…and 449 more