VDB

RHSA-2026:82322

RHSA-2026:82322 PUBLISHED CVSS 5.400000095367432 MEDIUM

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Risk Scores

CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Red Hatcert-manager Operator for Red Hat OpenShift
Red Hatregistry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:6220742dc7d79a66cd00fddcfa24c9d044e27ccd47dfbf1cf4833b92574fa77f_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.17*
Red Hatregistry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:ddbdf4a61246d336c716623add6a59fdac078971824e5e50812002a6cbb6770e_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.17*
Red Hatregistry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:bc5b798da5bb23a48f26b3592e39e4f1449bf6f279fe47741b5cda43a0923085_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.17*
Red Hatregistry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:a9d8ac890b900255549a4879c61a617e6d7fa3cdec9db4161f76e0baa32805f2_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.17*

Timeline

  • Oct 13, 2026 CVE Published
  • Oct 23, 2026 CVE Updated
  • Oct 23, 2026 Distribution Patch
  • Oct 23, 2026 Distribution Patch
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
  • Oct 23, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 50/day Open console ›