VDB
RHSA-2026:70587
RHSA-2026:70587
PUBLISHED
CVSS 7.199999809265137 HIGH
A flaw was found in HashiCorp memberlist. An attacker with network access to the gossip port could exploit a vulnerability in the push/pull state handling. This could lead to memory exhaustion on a receiving node, causing the process to terminate. This flaw results in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:95964ddb17a1fc00e746137b742985e70c6207cd118784bf7d6ac9624850ac29_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-cloud-controller-manager-rhel9@sha256:76eb570419031839e38b8e3443d4251ebff72ee85a764cf00a3ea3a9c8208c64_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-network-interface-bond-cni-rhel9@sha256:b34124ee83ac4aa48e0ccbc45e346da9c8ac59910cbd5302d68af2e4bf02c4ff_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:d0b22478f0be17aee42aafb8971acf13e1d2680092e3ab24814a1ecced20efd0_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel9@sha256:ae4f37048bfa88e690a6dd90afa448b3263923675fc1b16eb5e3927e09e48748_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:0f6ef5be6ad771ef183941d1627cc6fcddeec0570da6762babd99864ea46cb48_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-configmap-reloader-rhel9@sha256:891f5f5c2228d824abc2922497c91582e97f502387d3b13f9d8383b9fcab6f66_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-microshift-rhel9@sha256:d1bdd5c30d1211b1c397d117f60a704288e285b15cf7eb7f95d6cc29f8fa8563_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-workload-identity-federation-webhook-rhel9@sha256:54f19d8cef7c5abaaedb16e5e68c710f9fb0b2de52bfd50e4e74322c7362039c_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9e961387b072b45a12ab59ab8806d81ce2d3e314747ee51049ea45fa2fa68213_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:211618bfa33a188b97e9ab316d8fbd07878d7d78d1ed8db41e546b6ae601241b_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-version-rhel9-operator@sha256:32a60a6f1a39bfb6b2fb734044c49fab8de4eadfdebfbd59561830c882055452_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:194096c8b107f89b31fb7a0935f494988f228a512e4b80cb1e1a17f16f1e2ddf_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:8f7fc8e6b93ec201fa7abfec5cbb52b7a9f8c15256719fc0407fb0ae3a61bc46_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:253c5c588816bb9e8f4626da2701a7e9d1b039b484ea82c54c566ec001bfd126_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9@sha256:be4939288e49845d9fbe46c2881ca1fbfcde36adb0305a50cd829e6e1e2ad9bc_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:b7bb190ae9877595285175826f93269090b19978092209a3e168e47c11a89db6_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:19935e59e54bbe8b753fcbc91548dc94e3de407214d19679eceeb68d41a9cb44_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel9@sha256:ad109ed8a6f91fe689915570875da490f00689997f65922e3cd869e53db8e106_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:65759e568f4a9d57b2adcc958b3162e95cb17dae174c8c39c801bf3e4d28cbe2_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
…and 630 more
Timeline
- Oct 1, 2026 CVE Published
- Oct 4, 2026 CVE Updated
- Oct 4, 2026 Distribution Patch
- Oct 4, 2026 Distribution Patch
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
- Oct 4, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:70587 advisory
- https://access.redhat.com/security/cve/CVE-2026-14362 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-42965 advisory
- https://access.redhat.com/security/cve/CVE-2026-43003 advisory
- https://access.redhat.com/security/cve/CVE-2026-44918 advisory
- https://access.redhat.com/security/cve/CVE-2026-44990 advisory
- https://access.redhat.com/security/cve/CVE-2026-45623 advisory
- https://access.redhat.com/security/cve/CVE-2026-46597 advisory
- https://access.redhat.com/security/cve/CVE-2026-48801 advisory
- https://access.redhat.com/security/cve/CVE-2026-54284 advisory
- https://access.redhat.com/security/cve/CVE-2026-54423 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 advisory
…and 136 more