VDB
RHSA-2026:77269
RHSA-2026:77269
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x as a component of Red Hat OpenShift GitOps 1.21 | *, *, * |
…and 22 more
Timeline
- Oct 7, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
References
- https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/ advisory
- https://access.redhat.com/errata/RHSA-2026:77269 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-50162 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56854 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77269.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515815 issue
- https://www.cve.org/CVERecord?id=CVE-2026-33818 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33818 advisory
- https://go.dev/cl/814980 advisory
- https://go.dev/issue/80405 advisory
- https://groups.google.com/g/golang-announce/c/94pEornpRlI advisory
- https://pkg.go.dev/vuln/GO-2026-5972 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484830 issue
- https://www.cve.org/CVERecord?id=CVE-2026-41178 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-41178 advisory
- https://github.com/open-telemetry/opentelemetry-go/pull/7880 advisory
…and 17 more