VDB
RHSA-2026:77899
RHSA-2026:77899
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:624bcc05dc21cf9c17e815095102da60fbe9ff75ba6181a7123114b5bc1b8dde_amd64 as a component of Red Hat Web Terminal 1.11 | * |
| Red Hat | registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:5bbf516dcfa5afbeee5e5b600cf1dd558b409b6c791db6cee07b40b8446a0564_amd64 as a component of Red Hat Web Terminal 1.11 | * |
| Red Hat | registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:1ee5b2352176e8ae17af01e9bd5a5dee731d3f6eb8875d0364f557a44e58e782_amd64 as a component of Red Hat Web Terminal 1.11 | * |
| Red Hat | registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:492db388485e71ccc79d35f7ee504b5e5545ae376e9a82cdc2f319382fca8a25_amd64 as a component of Red Hat Web Terminal 1.11 | * |
Timeline
- Oct 7, 2026 CVE Published
- Nov 1, 2026 CVE Updated
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:77899 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://redhat.atlassian.net/browse/WTO-517 advisory
- https://redhat.atlassian.net/browse/WTO-524 advisory
- https://redhat.atlassian.net/browse/WTO-531 advisory
- https://redhat.atlassian.net/browse/WTO-538 advisory
- https://redhat.atlassian.net/browse/WTO-545 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77899.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515815 issue
- https://www.cve.org/CVERecord?id=CVE-2026-33818 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33818 advisory
- https://go.dev/cl/814980 advisory
- https://go.dev/issue/80405 advisory
- https://groups.google.com/g/golang-announce/c/94pEornpRlI advisory
- https://pkg.go.dev/vuln/GO-2026-5972 advisory
…and 24 more