RHSA-2026:74796 | Vulnetix

RHSA-2026:74796 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

Risk Scores

CVSS 3.1

8.100000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

…and 7 more

Timeline

Oct 6, 2026 CVE Published
Nov 1, 2026 CVE Updated
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Security Advisory
Nov 1, 2026 Security Advisory
Nov 1, 2026 Security Advisory
Nov 1, 2026 Security Advisory
Nov 1, 2026 Security Advisory
Nov 1, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2026:74796 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 issue
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74796.json advisory
https://access.redhat.com/security/cve/CVE-2026-33818 advisory
https://www.cve.org/CVERecord?id=CVE-2026-33818 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 advisory
https://go.dev/cl/814980 advisory
https://go.dev/issue/80405 advisory
https://groups.google.com/g/golang-announce/c/94pEornpRlI advisory
https://pkg.go.dev/vuln/GO-2026-5972 advisory
https://access.redhat.com/security/cve/CVE-2026-42504 advisory
https://www.cve.org/CVERecord?id=CVE-2026-42504 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 advisory
https://go.dev/cl/774481 advisory
https://go.dev/issue/79217 advisory

…and 20 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	microshift-gateway-api-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-olm-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-multus-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-ai-model-serving-release-info-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-multus-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-olm-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-cert-manager-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-cert-manager-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-multus-release-info-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-selinux-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-observability-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-olm-release-info-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-sriov-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-gateway-api-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-greenboot-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.noarch as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-sriov-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.src as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-networking-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9
Red Hat	microshift-ai-model-serving-0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.21	0:4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9