VDB
RHSA-2026:79378
RHSA-2026:79378
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in fflate. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP archive. This archive, when processed, can lead to an infinite loop during decompression, causing a Denial of Service (DoS) condition. This occurs because a malformed central directory entry in the ZIP archive causes out-of-bounds reads, which keeps a processing loop permanently active.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:0db83bdb943c6a065bc54fc57f4dd23742895c6885b25e2352142c90786f7517_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:ca6c46eee8df1483a0e976ad5c7d694d327877dc4b271b96857b9fb86c2759ac_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:91484734bbb34018bbc943fbaaf2ac7c7c14ed6931d49e6e1372a81d235c125a_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:44d5a9fe13dca1011df0774c4c6a26e7b9e1e110f9d97a55c0a1757cab626627_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ee-control-plane-rhel9@sha256:f379b62f8025a289b8954b9f8a4cd0be39ac6c737e078f2bef39dafd6237309c_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:90ab0d048385b72c760d57c2eb194dfbc0224176e3bd8fc0dccb31eebf6fe8c5_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:113b2bea875d85d3b8bb9f84a7c247de78924fb1e45ec2671e982b20a8dcaf73_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:310446091a507b746345cd40f041b5c229b32df1c7efd9c8c82549ec4eb71742_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ba5292da2ce8ed48b785de0e96fc9ed7207ef8b6ab682ac4a0d4df9cd9716055_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:51c9828a8f665adf6cce0239daa19c748fad0bc2d321e51ba7754696afb7d30c_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:394993edbfb979b51acaaad30aa38e7025c4e0f804ce6d3411d5bb4a8b09d199_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:c104b9869085faad8ac7cefd1f091683ac58efc4611d3808677b6e8a10ab275e_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:2193e13ba7e966f5de9a394699263ef55355e00add62570390a313770b0110f6_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:a8fe0b304e437baf6a2df148b3ed0f90cbdeed134794427a717bbea6a1d8de1a_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:d253cae013e84b03ebfb9cbe3b43fddb9271a6e5adc0c3a6e85f2d631f752a07_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:08cb441fc4dd5b8da1ecbb8a53f3cda9208abe874d284f87fc14fc7bdafc6304_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d422c14c5d407845cec61dadf768f7cfe7c51a43d221f84d2ced23c7217762c7_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:ecc7dd8133c1742063ac520b277d541475637b9455f69a510a81e42e65ec713b_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:44ab79240063392848d923dfacac51782df58d84929b6073418b3bf6c64ac84e_arm64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:798ca30b85d5d817fbc535fccb77e8972c7ee4385ff575137a7a7005365be24b_amd64 as a component of Red Hat Ansible Automation Platform 2.7 | * |
…and 44 more
Timeline
- Oct 8, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:79378 advisory
- https://access.redhat.com/security/cve/CVE-2026-102273 advisory
- https://access.redhat.com/security/cve/CVE-2026-45820 advisory
- https://access.redhat.com/security/cve/CVE-2026-59893 advisory
- https://access.redhat.com/security/cve/CVE-2026-63374 advisory
- https://access.redhat.com/security/cve/CVE-2026-69243 advisory
- https://access.redhat.com/security/cve/CVE-2026-76218 advisory
- https://access.redhat.com/security/cve/CVE-2026-76219 advisory
- https://access.redhat.com/security/cve/CVE-2026-76220 advisory
- https://access.redhat.com/security/cve/CVE-2026-76221 advisory
- https://access.redhat.com/security/cve/CVE-2026-76222 advisory
- https://access.redhat.com/security/cve/CVE-2026-78676 advisory
- https://access.redhat.com/security/cve/CVE-2026-91990 advisory
- https://access.redhat.com/security/cve/CVE-2026-96760 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79378.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2506034 issue
- https://www.cve.org/CVERecord?id=CVE-2026-45820 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-45820 advisory
…and 67 more