VDB
RHSA-2026:65852
RHSA-2026:65852
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in HashiCorp memberlist. An attacker with network access to the gossip port could exploit a vulnerability in the push/pull state handling. This could lead to memory exhaustion on a receiving node, causing the process to terminate. This flaw results in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-powervs-cloud-controller-manager-rhel9@sha256:5041a160afe05e3cc4b1d3328157b6b859794b1449043893d8101223fb22ced1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-microshift-rhel9@sha256:c3ca096f001b4f693f433469fa988bf3140b22ee2af26eb55ace7d31759caa7a_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:4177154832ec5cd163ef9360c2e28b827f8d328d509cc6827202e11a83fdfe32_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:d9a167d950324c0180a40e4b2aa28164b2e8fb82cebabea8ce922072e826afb2_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:ee8ace64e1a6202dd3a78e0060d330a15ef98400447403048d2e2f548acdc1b4_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:23b0b3032ee9a23853b327f3f9989284921ee5f0774c3b63752942dbda6dfbbc_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-manila-rhel9@sha256:1f2025b13c359780f5fd1ae19c688eb168a1245d3886d3fdccf4d5854c6e8db6_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-operator-rhel9@sha256:995b657237e5a596fb29b3898501163017e7fad7abab8d45b88cddf7d0691d3d_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:57a7dd9dcdd915ee1df569a02b4ac2b3ac0460a29add3b57d05516d9537373cb_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-admission-controller-rhel9@sha256:7a9151aec6552684f82a393603d82e92d9d90155310b645bf66b044243e02e15_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:655aa8493b32b5d149ea32e9a2a3a16c78a60ffc2dd45c9edf7afeb2291d6953_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-olm-operator-controller-rhel9@sha256:61cf819e4391beec3aa9ad4d0384e9715c0f4007c5bea8116d82796916cae056_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-snapshot-controller-rhel9@sha256:91f8f35aba3fec2fcd07af74142d31a707553a3f3c0b37347fd7228df397d68e_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-dns-rhel9-operator@sha256:f15df791bc0c17aec2a104b40c9cd304f5670b2622ea018b4b029405f8540ed7_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:8dc081c8c964b26cd01929e9193b25bc4d9bce89a8ac2f1aa3fbd659de5613a5_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:9851c0c9dae3114d3aa54267b14034ab3f50aa25a58f01ca65846afbc348a88b_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:bb17f4ee945bf8875557628d7da63bd50cc889ba451889d6b780ee01beeb4d61_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0c54235394fd26bf540694f328d9025b83ba59777f2afd41c9ba58efa52b86da_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-image-registry-rhel9-operator@sha256:7b933b5838204f9275f9009a5281624c86e9cd67c4b90bd40e3c3a80ce0f5dd9_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-keepalived-ipfailover-rhel9@sha256:b1872b4b26adecd0dcd4eef3ba80e8e41650fb0b9159b21569de39997b6409bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
…and 630 more
Timeline
- Sep 17, 2026 CVE Published
- Sep 26, 2026 CVE Updated
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:65852 advisory
- https://access.redhat.com/security/cve/CVE-2026-14362 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39829 advisory
- https://access.redhat.com/security/cve/CVE-2026-42965 advisory
- https://access.redhat.com/security/cve/CVE-2026-43003 advisory
- https://access.redhat.com/security/cve/CVE-2026-44918 advisory
- https://access.redhat.com/security/cve/CVE-2026-45623 advisory
- https://access.redhat.com/security/cve/CVE-2026-46597 advisory
- https://access.redhat.com/security/cve/CVE-2026-54284 advisory
- https://access.redhat.com/security/cve/CVE-2026-54423 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 advisory
- https://access.redhat.com/security/cve/CVE-2026-66138 advisory
- https://access.redhat.com/security/cve/CVE-2026-69153 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65852.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2498174 issue
- https://www.cve.org/CVERecord?id=CVE-2026-14362 advisory
…and 85 more