VDB
RHSA-2026:87246
RHSA-2026:87246
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | golang-docs-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | delve-debuginfo-0:1.26.1-1.module+el8.6.0+24782+a062e766.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.1-1.module |
| Red Hat | go-toolset-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | delve-debugsource-0:1.26.1-1.module+el8.6.0+24782+a062e766.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.1-1.module |
| Red Hat | golang-misc-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-race-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | delve-debugsource-0:1.26.1-1.module+el8.6.0+24782+a062e766.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.1-1.module |
| Red Hat | golang-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | go-toolset-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-race-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | delve-0:1.26.1-1.module+el8.6.0+24782+a062e766.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.1-1.module |
| Red Hat | golang-src-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-misc-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | delve-0:1.26.1-1.module+el8.6.0+24782+a062e766.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.1-1.module |
| Red Hat | golang-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-bin-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-docs-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-src-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-tests-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | 1.26.10-4.module |
| Red Hat | golang-0:1.26.10-4.module+el8.6.0+25114+90ecdb41.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | 1.26.10-4.module |
…and 6 more
Timeline
- Oct 21, 2026 CVE Published
- Oct 23, 2026 CVE Updated
- Oct 23, 2026 Distribution Patch
- Oct 23, 2026 Distribution Patch
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
- Oct 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:87246 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2341751 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2344219 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2372320 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2373305 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2445345 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456333 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456335 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456336 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456338 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456340 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467809 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467815 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467820 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467822 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2480756 issue
…and 289 more