9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: от 0:3.1.2-14.el7_9.2 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:3.3.3-7.el8_10 нататък
- Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: от 0:3.3.2-8.el8_2.2 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: от 0:3.3.3-1.el8_4.2 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: от 0:3.3.3-1.el8_4.2 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: от 0:3.3.3-6.el8_6.1 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: от 0:3.3.3-6.el8_6.1 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: от 0:3.3.3-6.el8_6.1 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: от 0:3.3.3-5.el8_8.2 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: от 0:3.3.3-5.el8_8.2 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.5.3-9.el9_7 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.5.3-9.el9_7 нататък
- Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions: от 0:3.5.3-2.el9_0.4 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:3.5.3-5.el9_2.2 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: от 0:3.5.3-5.el9_4 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:3.5.3-7.el9_6.1 нататък
- Red Hat Red Hat OpenShift Container Platform 4.12: от 412.86.202604281506-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.13: от 413.92.202605271328-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.14: от 414.92.202605060243-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.15: от 415.92.202605060220-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.16: от 416.94.202604211449-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.17: от 417.94.202605112123-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.18: от 418.94.202604240015-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.19: от 4.19.9.6.202605201155-0 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325677 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325711 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325710 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-3.1777325680 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325709 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325680 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325708 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791371080 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791371069 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791788287 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791970484 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459707 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459711 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459759 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1789029076 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791966259 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790598593 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1779223654 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1779223651 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1780681984 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244559 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244531 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778274666 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244546 нататък
- Red Hat Red Hat Discovery 2: от 1778156756 нататък
- Red Hat Red Hat Hardened Images: от 3.8.7-1.hum1 нататък
- Red Hat Red Hat Insights proxy 1.5: от 1776868961 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1776868774 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1776868744 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1776868772 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1776868842 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1777459441 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1777454300 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1777459504 нататък
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Siemens SIDIS Secured SmartPlug: преди V7.26.0310
Вид слабост
История
- 30 март 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-5121
- https://nvd.nist.gov/vuln/detail/CVE-2026-5121
- https://access.redhat.com/errata/RHSA-2026:10065
- https://access.redhat.com/errata/RHSA-2026:10097
- https://access.redhat.com/errata/RHSA-2026:11768
- https://access.redhat.com/errata/RHSA-2026:12071
- https://access.redhat.com/errata/RHSA-2026:12274
- https://access.redhat.com/errata/RHSA-2026:13812
- https://access.redhat.com/errata/RHSA-2026:14773
- https://access.redhat.com/errata/RHSA-2026:14937
- https://access.redhat.com/errata/RHSA-2026:15087
- https://access.redhat.com/errata/RHSA-2026:16008
- https://access.redhat.com/errata/RHSA-2026:16009
- https://access.redhat.com/errata/RHSA-2026:16030
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:17596
- https://access.redhat.com/errata/RHSA-2026:19724
- https://access.redhat.com/errata/RHSA-2026:19725
- https://access.redhat.com/errata/RHSA-2026:20040
- https://access.redhat.com/errata/RHSA-2026:21690
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/errata/RHSA-2026:8510
- https://access.redhat.com/errata/RHSA-2026:8517
- https://access.redhat.com/errata/RHSA-2026:8521
- https://access.redhat.com/errata/RHSA-2026:8534
- https://access.redhat.com/errata/RHSA-2026:8864
- https://access.redhat.com/errata/RHSA-2026:8866
- https://access.redhat.com/errata/RHSA-2026:8867
- https://access.redhat.com/errata/RHSA-2026:8873
- https://access.redhat.com/errata/RHSA-2026:8908
- https://access.redhat.com/errata/RHSA-2026:8944
- https://access.redhat.com/errata/RHSA-2026:9026
- https://access.redhat.com/errata/RHSA-2026:9592
- https://access.redhat.com/errata/RHSA-2026:9832
- https://access.redhat.com/security/cve/CVE-2026-5121
- https://bugzilla.redhat.com/show_bug.cgi?id=2452945
- https://github.com/advisories/GHSA-2vwv-vqpv-v8vc
- https://github.com/libarchive/libarchive/pull/2934
- https://cert-portal.siemens.com/productcert/html/ssa-585531.html