CVE-2026-88835: Red Hat Hardened Images, грешка в паметта

Описание

Оригинално описание

BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.

Засегнати продукти

• Red Hat Red Hat Hardened Images: 1.37.0-9.1.hum1 преди *

Вид слабост

• CWE-125 Четене извън границите на буфера

История

Други уязвимости в Red Hat Red Hat Hardened Images

• 3.7CVE-2026-115456
• 6.5CVE-2026-115455
• 5.9CVE-2026-114691
• 6.2CVE-2026-114690
• 3.5CVE-2026-85498

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-88835
• https://nvd.nist.gov/vuln/detail/CVE-2026-88835
• https://access.redhat.com/errata/RHSA-2026:72111
• https://access.redhat.com/security/cve/CVE-2026-88835
• https://bugzilla.redhat.com/show_bug.cgi?id=2531349