VDB
RHSA-2026:89041
RHSA-2026:89041
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
…and 17 more
Timeline
- Oct 24, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89041 advisory
- https://access.redhat.com/security/cve/CVE-2026-111943 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-39821 advisory
- https://access.redhat.com/security/cve/CVE-2026-40161 advisory
- https://access.redhat.com/security/cve/CVE-2026-40938 advisory
- https://access.redhat.com/security/cve/CVE-2026-46600 advisory
- https://access.redhat.com/security/cve/CVE-2026-56851 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-78667 advisory
- https://access.redhat.com/security/cve/CVE-2026-78669 advisory
- https://access.redhat.com/security/cve/CVE-2026-84304 advisory
- https://access.redhat.com/security/cve/CVE-2026-84445 advisory
- https://access.redhat.com/security/cve/CVE-2026-97031 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89041.json advisory
…and 116 more