VDB
RHSA-2026:83013
RHSA-2026:83013
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0 | * |
…and 14 more
Timeline
- Oct 14, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:83013 advisory
- https://access.redhat.com/security/cve/CVE-2026-18140 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-29181 advisory
- https://access.redhat.com/security/cve/CVE-2026-32283 advisory
- https://access.redhat.com/security/cve/CVE-2026-32285 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-35469 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42151 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-46600 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
…and 149 more