Към съдържанието
Търсене

CVE-2026-5367: Red Hat Fast Datapath for Red Hat Enterprise Linux 10

8.6

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.

Засегнати продукти

  • Red Hat Fast Datapath for Red Hat Enterprise Linux 10: 0:25.03.2-100.el10fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 10: 0:25.09.2-103.el10fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 8: 0:21.12.0-145.el8fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 8: 0:23.06.4-30.el8fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: 0:23.06.4-30.el9fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: 0:23.09.6-16.el9fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: 0:24.03.7-82.el9fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: 0:25.03.2-100.el9fdp преди *
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: 0:25.09.2-103.el9fdp преди *
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4

Вид слабост

История

  • 24 април 2026 Публикувано

Други уязвимости в Red Hat Fast Datapath for Red Hat Enterprise Linux 10

Първоизточници

CVE-2026-5367: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 | freedomonline.bg