7.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Засегнати продукти
- Go standard library net: преди 1.25.10; 1.26.0-0 преди 1.26.3
- Red Hat Cryostat 4 on RHEL 9: 4.2.0-19 преди *
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: 0:1.6.6-1.el8ap преди *
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: 0:1.6.6-1.el9ap преди *
- Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10: 0:1.6.6-1.el10ap преди *
- Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:1.6.6-1.el9ap преди *
- Red Hat Red Hat Enterprise Linux 10: 0:1.26.3-4.el10_2 преди *
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:1.26.5-1.el10_0 преди *
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:0.11-1.el7_9 преди *
- Red Hat Red Hat Enterprise Linux 8: 8100020260518131104.a3795dee преди *
- Red Hat Red Hat Enterprise Linux 9: 0:1.26.3-1.el9_8 преди *
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:1.26.5-1.el9_2 преди *
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:0.152.1-1.el9_4 преди *
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:1.26.5-1.el9_6 преди *
- Red Hat Red Hat OpenShift Container Platform 4.14: 0:0.19.0-5.rhaos4.14.el8 преди *
- Red Hat Red Hat OpenShift Container Platform 4.15: 0:0.20.0-6.rhaos4.15.el8 преди *
- Red Hat Red Hat OpenShift Container Platform 4.16: 0:0.21.0-6.rhaos4.16.el8 преди *
- Red Hat Red Hat OpenShift Container Platform 4.17: 0:1.30.0-9.el8 преди *
- Red Hat Red Hat OpenShift Container Platform 4.18: 0:0.23.0-5.rhaos4.18.el8 преди *
- Red Hat Red Hat OpenShift Container Platform 4.19: 0:1.32.0-6.el9 преди *
- Red Hat Red Hat OpenStack Platform 16.2: 0:0.2.1-1.1.el8ost преди *
- Red Hat Red Hat OpenStack Services on OpenShift 18.0: 0:0.1.1-18.0.20260602234716.a95ae05.el9ost преди *
- Red Hat Red Hat Satellite 6.16 for RHEL 8: 0:0.0.4-1.el8sat преди *
- Red Hat Red Hat Satellite 6.16 for RHEL 9: 0:0.0.4-1.el9sat преди *
- Red Hat Red Hat Satellite 6.17 for RHEL 9: 0:0.0.4-1.el9sat преди *
- Red Hat Red Hat Satellite 6.18 for RHEL 9: 0:0.0.4-1.el9sat преди *
- Red Hat Red Hat Satellite 6.19 for RHEL 9: 0:0.0.4-1.el9sat преди *
- Red Hat RHEM 1.0 for RHEL 9: 0:1.0.3-1.el9em преди *
- Red Hat RHEM 1.1 for RHEL 10: 0:1.1.3-1.el10em преди *
- Red Hat RHEM 1.1 for RHEL 9: 0:1.1.3-1.el9em преди *
- Red Hat Streams for Apache Kafka 3.2.1: danielqsj-kafka_exporter преди *
- Red Hat Compliance Operator 1: 1786380082 преди *
- Red Hat Logging for Red Hat OpenShift 6: 1785418851 преди *
- Red Hat Logging for Red Hat OpenShift 6.2: 1784747813 преди *
- Red Hat Logging Subsystem for Red Hat OpenShift 6.4: 1782408807 преди *
- Red Hat Logging Subsystem for Red Hat OpenShift 6.5: 1786645248 преди *
- Red Hat multicluster engine for Kubernetes 2.1: 1784915379 преди *
- Red Hat multicluster engine for Kubernetes 2.11: 1786911941 преди *
- Red Hat multicluster engine for Kubernetes 2.6: 1783985999 преди *
- Red Hat multicluster engine for Kubernetes 2.8: 1784306906 преди *
- Red Hat multicluster engine for Kubernetes 2.9: 1786658519 преди *
- Red Hat Multicluster Global Hub 1.4.5: 1784061472 преди *
- Red Hat Multicluster Global Hub 1.6.5: 1784152046 преди *
- Red Hat Multicluster Global Hub 1.7.0: 1784768332 преди *; 1785775948 преди *
- Red Hat OpenShift API for Data Protection 1.3: 1785180878 преди *
- Red Hat OpenShift API for Data Protection 1.4: 1786944540 преди *
- Red Hat OpenShift API for Data Protection 1.5: 1788860461 преди *
- Red Hat OpenShift API for Data Protection 1.6: 1784058822 преди *
- Red Hat OpenShift Developer Tools and Services 1.6.3: 1784727697 преди *
- Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1786908301 преди *
- Red Hat Red Hat Advanced Cluster Security 4.9: 1783357116 преди *
- Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10: 1783357140 преди *
- Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.11: 1783352589 преди *
- Red Hat Red Hat Ansible Automation Platform 2.6: 1783962464 преди *
- Red Hat Red Hat Developer Hub 1.9: 1782767215 преди *
- Red Hat Red Hat Edge Manager 1.0: 1783502438 преди *
- Red Hat Red Hat Edge Manager 1.1: 1784194574 преди *
- Red Hat Red Hat Hardened Images: 1.25.11-2.hum1 преди *
- Red Hat Red Hat Lightspeed (formerly Insights) for Runtimes 1.0: 1786483782 преди *
- Red Hat Red Hat Migration Toolkit 1.8: 1783914276 преди *
- Red Hat Red Hat Migration Toolkit for Applications 8.1: 1785171639 преди *
- Red Hat Red Hat Migration Toolkit for Applications 8.2: 1784211378 преди *
- Red Hat Red Hat multicluster global hub 1.5.3: 1784127491 преди *
- Red Hat Red Hat OpenShift AI 2.25: 1783544461 преди *
- Red Hat Red Hat OpenShift AI 3.4: 1787002529 преди *
- Red Hat Red Hat OpenShift Builds 1.7.3: 1783057868 преди *
- Red Hat Red Hat OpenShift Container Platform 4.20: 1786525840 преди *
- Red Hat Red Hat OpenShift Container Platform 4.21: 1786573075 преди *
- Red Hat Red Hat OpenShift distributed tracing 3.10.2: 1785704547 преди *
- Red Hat Red Hat OpenShift GitOps 1.19: 1782292352 преди *
- Red Hat Red Hat OpenShift GitOps 1.20: 1782383826 преди *
- Red Hat Red Hat OpenShift GitOps 1.21: 1782910941 преди *
- Red Hat Red Hat OpenShift Service Mesh 3.0: 1782222217 преди *
- Red Hat Red Hat OpenShift Service Mesh 3.1: 1782222163 преди *
- Red Hat Red Hat OpenShift Service Mesh 3.2: 1782226178 преди *
- Red Hat Red Hat OpenShift Service Mesh 3.3: 1782223045 преди *
- Red Hat Red Hat OpenShift Workload Availability 0.12: 1785202723 преди *
- Red Hat Red Hat OpenShift Workload Availability 0.13: 1785203036 преди *
- Red Hat Red Hat OpenShift Workload Availability 0.3: 1785203474 преди *
- Red Hat Red Hat OpenShift Workload Availability 0.7: 1785203508 преди *
- Red Hat Red Hat OpenShift Workload Availability 0.8: 1785203079 преди *
- Red Hat Red Hat OpenShift Workload Availability 5.7: 1785202847 преди *
- Red Hat Red Hat Satellite 6.18: 1785923308 преди *
- Red Hat Red Hat Satellite 6.19: 1785929994 преди *
- Red Hat Red Hat Trusted Artifact Signer 1.4: 4-1.4.2 преди *; 4-1.4.3 преди *
- Red Hat Red Hat Web Terminal 1.11: 1784296203 преди *
- Red Hat Red Hat Web Terminal 1.12: 1784247610 преди *
- Red Hat Red Hat Web Terminal 1.13: 1784296127 преди *
- Red Hat Red Hat Web Terminal 1.14: 1784296114 преди *
- Red Hat Red Hat Web Terminal 1.15: 1784296033 преди *
- Red Hat Red Hat Web Terminal 1.16: 1784295767 преди *
- Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2
- Red Hat cert-manager Operator for Red Hat OpenShift
- Red Hat Confidential Compute Attestation
- Red Hat Custom Metric Autoscaler operator for Red Hat Openshift
- Red Hat Deployment Validation Operator
- Red Hat ExternalDNS Operator
- Red Hat External Secrets Operator for Red Hat OpenShift
- Red Hat Fence Agents Remediation Operator
- Red Hat File Integrity Operator
- Red Hat Gatekeeper 3
- Red Hat Logical Volume Manager Storage
- Red Hat Machine Deletion Remediation Operator
- Red Hat mirror registry for Red Hat OpenShift
- Red Hat mirror registry for Red Hat OpenShift 2
- Red Hat Multiarch Tuning Operator
- Red Hat Multicluster Engine for Kubernetes
- Red Hat Multicluster Global Hub
- Red Hat Network Observability Operator
- Red Hat Node HealthCheck Operator
- Red Hat OpenShift Developer Tools and Services
- Red Hat OpenShift Lightspeed
- Red Hat OpenShift Pipelines
- Red Hat OpenShift Serverless
- Red Hat OpenShift Service Mesh 2
- Red Hat OpenShift Service Mesh 3
- Red Hat Power monitoring for Red Hat OpenShift
- Red Hat Red Hat 3scale API Management Platform 2
- Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Red Hat AMQ Clients
- Red Hat Red Hat Ansible Automation Platform 2
- Red Hat Red Hat build of Apicurio Registry 2
- Red Hat Red Hat Ceph Storage 5
- Red Hat Red Hat Ceph Storage 6
- Red Hat Red Hat Ceph Storage 9
- Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
- Red Hat Red Hat Connectivity Link 1
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift Cluster Manager CLI
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat Openshift Data Foundation 4
- Red Hat Red Hat OpenShift Dev Spaces
- Red Hat Red Hat OpenShift Dev Workspaces Operator
- Red Hat Red Hat OpenShift for Windows Containers
- Red Hat Red Hat OpenShift on AWS
- Red Hat Red Hat OpenShift Virtualization 4
- Red Hat Red Hat OpenStack Platform 17.1
- Red Hat Red Hat Quay 3
- Red Hat Red Hat Satellite 6
- Red Hat Red Hat Service Interconnect 1
- Red Hat Red Hat Service Interconnect 2
- Red Hat Security Profiles Operator
- Red Hat Service Telemetry Framework 1.5
- Red Hat Zero Trust Workload Identity Manager
- Red Hat Zero Trust Workload Identity Manager - Tech Preview
Вид слабост
История
- 7 май 2026 Публикувано
Други уязвимости в Go standard library net
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-33811
- https://nvd.nist.gov/vuln/detail/CVE-2026-33811
- https://go.dev/issue/78803
- https://go.dev/cl/767860
- https://groups.google.com/g/golang-announce/c/qcCIEXso47M
- https://pkg.go.dev/vuln/GO-2026-4981
- https://access.redhat.com/security/cve/CVE-2026-33811
- https://bugzilla.redhat.com/show_bug.cgi?id=2467822
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json
- https://access.redhat.com/errata/RHSA-2026:42079
- https://access.redhat.com/errata/RHSA-2026:41019
- https://access.redhat.com/errata/RHSA-2026:54191
- https://access.redhat.com/errata/RHSA-2026:42078
- https://access.redhat.com/errata/RHSA-2026:50319
- https://access.redhat.com/errata/RHSA-2026:54757
- https://access.redhat.com/errata/RHSA-2026:56785
- https://access.redhat.com/errata/RHSA-2026:56910
- https://access.redhat.com/errata/RHSA-2026:56852
- https://access.redhat.com/errata/RHSA-2026:60018
- https://access.redhat.com/errata/RHSA-2026:57482
- https://access.redhat.com/errata/RHSA-2026:54552
- https://access.redhat.com/errata/RHSA-2026:42082
- https://access.redhat.com/errata/RHSA-2026:50336
- https://access.redhat.com/errata/RHSA-2026:48151
- https://access.redhat.com/errata/RHSA-2026:36796
- https://access.redhat.com/errata/RHSA-2026:39810
- https://access.redhat.com/errata/RHSA-2026:42150
- https://access.redhat.com/errata/RHSA-2026:42151
- https://access.redhat.com/errata/RHSA-2026:42240
- https://access.redhat.com/errata/RHSA-2026:49703
- https://access.redhat.com/errata/RHSA-2026:67149
- https://access.redhat.com/errata/RHSA-2026:49702
- https://access.redhat.com/errata/RHSA-2026:53413
- https://access.redhat.com/errata/RHSA-2026:61313
- https://access.redhat.com/errata/RHSA-2026:54168
- https://access.redhat.com/errata/RHSA-2026:51187
- https://access.redhat.com/errata/RHSA-2026:39272
- https://access.redhat.com/errata/RHSA-2026:22120
- https://access.redhat.com/errata/RHSA-2026:65534
- https://access.redhat.com/errata/RHSA-2026:35832
- https://access.redhat.com/errata/RHSA-2026:34357
- https://access.redhat.com/errata/RHSA-2026:42946
- https://access.redhat.com/errata/RHSA-2026:39573
- https://access.redhat.com/errata/RHSA-2026:38504
- https://access.redhat.com/errata/RHSA-2026:22112
- https://access.redhat.com/errata/RHSA-2026:39266
- https://access.redhat.com/errata/RHSA-2026:36776
- https://access.redhat.com/errata/RHSA-2026:67319
- https://access.redhat.com/errata/RHSA-2026:61253
- https://access.redhat.com/errata/RHSA-2026:57649
- https://access.redhat.com/errata/RHSA-2026:53412
- https://access.redhat.com/errata/RHSA-2026:67287
- https://access.redhat.com/errata/RHSA-2026:49712
- https://access.redhat.com/errata/RHSA-2026:53415
- https://access.redhat.com/errata/RHSA-2026:39319
- https://access.redhat.com/errata/RHSA-2026:22121
- https://access.redhat.com/errata/RHSA-2026:65886
- https://access.redhat.com/errata/RHSA-2026:36617
- https://access.redhat.com/errata/RHSA-2026:34359
- https://access.redhat.com/errata/RHSA-2026:54500
- https://access.redhat.com/errata/RHSA-2026:34364
- https://access.redhat.com/errata/RHSA-2026:56340
- https://access.redhat.com/errata/RHSA-2026:47952
- https://access.redhat.com/errata/RHSA-2026:50843
- https://access.redhat.com/errata/RHSA-2026:41030
- https://access.redhat.com/errata/RHSA-2026:44622
- https://access.redhat.com/errata/RHSA-2026:47149
- https://access.redhat.com/errata/RHSA-2026:53530
- https://access.redhat.com/errata/RHSA-2026:51033
- https://access.redhat.com/errata/RHSA-2026:59467
- https://access.redhat.com/errata/RHSA-2026:66022
- https://access.redhat.com/errata/RHSA-2026:43692
- https://access.redhat.com/errata/RHSA-2026:51057
- https://access.redhat.com/errata/RHSA-2026:57191
- https://access.redhat.com/errata/RHSA-2026:36319
- https://access.redhat.com/errata/RHSA-2026:36625
- https://access.redhat.com/errata/RHSA-2026:36207
- https://access.redhat.com/errata/RHSA-2026:42132
- https://access.redhat.com/errata/RHSA-2026:33574
- https://access.redhat.com/errata/RHSA-2026:36651
- https://access.redhat.com/errata/RHSA-2026:40945
- https://access.redhat.com/errata/RHSA-2026:40118
- https://access.redhat.com/errata/RHSA-2026:23262
- https://access.redhat.com/errata/RHSA-2026:23264
- https://access.redhat.com/errata/RHSA-2026:54441
- https://access.redhat.com/errata/RHSA-2026:41928
- https://access.redhat.com/errata/RHSA-2026:50300
- https://access.redhat.com/errata/RHSA-2026:43038
- https://access.redhat.com/errata/RHSA-2026:65126
- https://access.redhat.com/errata/RHSA-2026:42644
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/errata/RHSA-2026:36648
- https://access.redhat.com/errata/RHSA-2026:56790
- https://access.redhat.com/errata/RHSA-2026:56789
- https://access.redhat.com/errata/RHSA-2026:56913
- https://access.redhat.com/errata/RHSA-2026:56912
- https://access.redhat.com/errata/RHSA-2026:56855
- https://access.redhat.com/errata/RHSA-2026:60025
- https://access.redhat.com/errata/RHSA-2026:57488
- https://access.redhat.com/errata/RHSA-2026:54556
- https://access.redhat.com/errata/RHSA-2026:54584
- https://access.redhat.com/errata/RHSA-2026:54603
- https://access.redhat.com/errata/RHSA-2026:54602
- https://access.redhat.com/errata/RHSA-2026:35994
- https://access.redhat.com/errata/RHSA-2026:35993
- https://access.redhat.com/errata/RHSA-2026:35995
- https://access.redhat.com/errata/RHSA-2026:33120
- https://access.redhat.com/errata/RHSA-2026:33123
- https://access.redhat.com/errata/RHSA-2026:33142
- https://access.redhat.com/errata/RHSA-2026:33150
- https://access.redhat.com/errata/RHSA-2026:54287
- https://access.redhat.com/errata/RHSA-2026:54284
- https://access.redhat.com/errata/RHSA-2026:54286
- https://access.redhat.com/errata/RHSA-2026:54285
- https://access.redhat.com/errata/RHSA-2026:54274
- https://access.redhat.com/errata/RHSA-2026:54283
- https://access.redhat.com/errata/RHSA-2026:50205
- https://access.redhat.com/errata/RHSA-2026:60302
- https://access.redhat.com/errata/RHSA-2026:51341
- https://access.redhat.com/errata/RHSA-2026:51194
- https://access.redhat.com/errata/RHSA-2026:36797
- https://access.redhat.com/errata/RHSA-2026:42043
- https://access.redhat.com/errata/RHSA-2026:42047
- https://access.redhat.com/errata/RHSA-2026:42050
- https://access.redhat.com/errata/RHSA-2026:42051
- https://access.redhat.com/errata/RHSA-2026:42049
- https://access.redhat.com/errata/RHSA-2026:42048
- https://access.redhat.com/errata/RHSA-2026:42852
- https://access.redhat.com/errata/RHSA-2026:54435
- https://access.redhat.com/errata/RHSA-2026:57194
- https://access.redhat.com/errata/RHSA-2026:46885
- https://access.redhat.com/errata/RHSA-2026:41055
- https://access.redhat.com/errata/RHSA-2026:47735
- https://access.redhat.com/errata/RHSA-2026:59559