VDB
RHSA-2026:89081
RHSA-2026:89081
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64 as a component of Red Hat OpenShift Builds 1.8.3 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x as a component of Red Hat OpenShift Builds 1.8.3 | * |
…and 17 more
Timeline
- Oct 24, 2026 CVE Published
- Nov 3, 2026 CVE Updated
- Nov 3, 2026 Distribution Patch
- Nov 3, 2026 Distribution Patch
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
- Nov 3, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89081 advisory
- https://access.redhat.com/security/cve/CVE-2026-111943 advisory
- https://access.redhat.com/security/cve/CVE-2026-114406 advisory
- https://access.redhat.com/security/cve/CVE-2026-46600 advisory
- https://access.redhat.com/security/cve/CVE-2026-56851 advisory
- https://access.redhat.com/security/cve/CVE-2026-78667 advisory
- https://access.redhat.com/security/cve/CVE-2026-78669 advisory
- https://access.redhat.com/security/cve/CVE-2026-84445 advisory
- https://access.redhat.com/security/cve/CVE-2026-97031 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89081.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2504234 issue
- https://www.cve.org/CVERecord?id=CVE-2026-46600 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46600 advisory
- https://go.dev/cl/786345 advisory
- https://go.dev/issue/79795 advisory
- https://pkg.go.dev/vuln/GO-2026-5942 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2547607 issue
- https://www.cve.org/CVERecord?id=CVE-2026-56851 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56851 advisory
…and 47 more