VDB
RHSA-2026:74362
RHSA-2026:74362
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhai/base-image-cuda-13.0-rhel9@sha256:c86af03d19f285d621cfab5b66774ad75b391e7fd14bc5ab6b3f3f4e4b1477e4_arm64 as a component of Red Hat OpenShift AI 3.3 | 13.0-rhel9 |
| Red Hat | registry.redhat.io/rhai/base-image-cuda-13.0-rhel9@sha256:30dc5285d8c74deaa63607666de0024cb03a5fbcf7fb9d90fb79144520a6cf9e_amd64 as a component of Red Hat OpenShift AI 3.3 | 13.0-rhel9 |
Timeline
- Oct 1, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74362.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2372952 issue
- https://www.cve.org/CVERecord?id=CVE-2025-6170 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-6170 advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487258 issue
- https://www.cve.org/CVERecord?id=CVE-2026-11822 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-11822 advisory
- https://sqlite.org/releaselog/3_53_2.html advisory
- https://sqlite.org/src/info/061febcf41ca advisory
- https://sqlite.org/src/info/4a5ad516ea93 advisory
- https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487269 issue
- https://www.cve.org/CVERecord?id=CVE-2026-11824 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-11824 advisory
- https://access.redhat.com/errata/RHSA-2026:74362 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-11822 advisory
- https://access.redhat.com/security/cve/CVE-2026-11824 advisory
- https://access.redhat.com/security/cve/CVE-2026-16118 advisory
…and 105 more