VDB
RHSA-2026:89031
RHSA-2026:89031
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c5d894cc5b13fa2bb5bc96ba606a96a1f79bc07ca91be68ee8b1a4a4652119b1_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:989969fd1ba43c9e7f80e6ae28e1a312dd4f2b46f43116edd5a6b31a62b3cfe2_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:23101b95b5a0b6408ca232a551d43aba4a8c84fb1f0d740cf13a70de45f5b92a_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:45b068b6fdbdd98d462e66e44d0d47607d3d0c8a77e9124ede6439aa42ccf1df_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8a7e9068f2d7f33de3d7e87ddab582555206fdddf7644c35557a73cac114f997_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:83889f2639b9b37489740820b9b523cc5a83b1fd0c108eb3ef2f05e7c58c4521_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:1ecce48ef98afe7dcd423a2d2f985a46b7ac53d6d2bc97078710a48d67ddf3bb_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c64b8f367de081258649633b5a37e94dd4c07727e7d13bb5b3a6d8c6ee93e331_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e8ca4669a67e58230f144375ebdad708e5cd263525d2054a04dc7164da6c7d72_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:6a596fc1b69a538085e176f80889ea62a1b4346299ad200c3c32f1cfff4a4018_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7fc7ac36a0e860ac6e7205d9b9ce6745f8fbfbfc155cbdf5516400dd15a6c58a_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:cf5d5ffcdf509d990b4b8e1a311a5448f62d5fd291db76ee57731f222f79c859_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2ade181adcd0b4e7dd72393e595f8213e72b5f1b53204a39f4a9e167171d2767_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d00cd476bd30955388efd6c75582a9b9d94b2bcd24f459ce20939a6ebac598d4_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:fe61452304c6e31a0089127da68ebde0a0e9a8de8b5899d20819947ab9e2ca0d_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd457ba0cb42ac76670c74438f3c4f80a2709af1af5a80ba179519b9754dc62f_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:d302ed931c6dcfe2500ef660bc15e424a4e6fc9ac77fd47ed03af70110150196_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:95a95d61db2db27bcc0ee04fa13362e29af804963aedc497bd5b23af06a76767_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:775cd8a21742824bd66e85b55f5480be7b7a98cebf8a8db6a4f6937760afe22d_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5d7f64f87b0d2e972a013555a27fec3fe8dc793fc6deaf76ef4329b20f2f6476_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
…and 17 more
Timeline
- Oct 24, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89031 advisory
- https://access.redhat.com/security/cve/CVE-2026-111943 advisory
- https://access.redhat.com/security/cve/CVE-2026-46600 advisory
- https://access.redhat.com/security/cve/CVE-2026-56851 advisory
- https://access.redhat.com/security/cve/CVE-2026-78667 advisory
- https://access.redhat.com/security/cve/CVE-2026-78669 advisory
- https://access.redhat.com/security/cve/CVE-2026-84445 advisory
- https://access.redhat.com/security/cve/CVE-2026-97031 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89031.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2504234 issue
- https://www.cve.org/CVERecord?id=CVE-2026-46600 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46600 advisory
- https://go.dev/cl/786345 advisory
- https://go.dev/issue/79795 advisory
- https://pkg.go.dev/vuln/GO-2026-5942 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2547607 issue
- https://www.cve.org/CVERecord?id=CVE-2026-56851 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56851 advisory
- https://go.dev/cl/793360 advisory
…and 42 more