VDB
RHSA-2026:82315
RHSA-2026:82315
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Record from redhat · Published October 13, 2026
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
Risk scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
…and 7 more
Timeline
- Oct 13, 2026 CVE Published
- Nov 1, 2026 CVE Updated
- Nov 1, 2026 Distribution Patch (2 in total, the first dated here)
- Nov 1, 2026 Security Advisory (13 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RHSA-2026:82315
vulnetix vdb fixes RHSA-2026:82315Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%3A82315/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2026:82315 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-73501 advisory
- https://access.redhat.com/security/cve/CVE-2026-73502 advisory
- https://access.redhat.com/security/cve/CVE-2026-76905 advisory
- https://access.redhat.com/security/cve/CVE-2026-77354 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://developers.redhat.com/products/mta/overview advisory
- https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82315.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515815 issue
- https://www.cve.org/CVERecord?id=CVE-2026-33818 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33818 advisory
…and 69 more