جزئیات آسیب‌پذیری

CVE-2025-61726

Go standard library net/urlRed Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat Cryostat 4Red Hat Custom Metric Autoscaler operator for Red Hat OpenshiftRed Hat Deployment Validation Operator

Memory exhaustion in query parameter parsing in net/url

CVSS 3.1
7.5بالا

شرح رسمی (انگلیسی)

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.5بالا 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5بالا 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

محصولات آسیب‌پذیر

۲۰۰ از ۳۳۲
فروشندهمحصولنسخه‌هامنبع
Go standard library net/url v < 1.24.12 CVEProject cvelistV5 (CNA)
Go standard library net/url 1.25.0 ≤ v < 1.25.6 CVEProject cvelistV5 (CNA)
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Cryostat 4 همه CVEProject cvelistV5 (CNA)
Red Hat Cryostat 4 همه CVEProject cvelistV5 (CNA)
Red Hat Cryostat 4 همه CVEProject cvelistV5 (CNA)
Red Hat Custom Metric Autoscaler operator for Red Hat Openshift همه CVEProject cvelistV5 (CNA)
Red Hat Custom Metric Autoscaler operator for Red Hat Openshift همه CVEProject cvelistV5 (CNA)
Red Hat Deployment Validation Operator همه CVEProject cvelistV5 (CNA)
Red Hat ExternalDNS Operator همه CVEProject cvelistV5 (CNA)
Red Hat ExternalDNS Operator همه CVEProject cvelistV5 (CNA)
Red Hat Fence Agents Remediation Operator همه CVEProject cvelistV5 (CNA)
Red Hat File Integrity Operator همه CVEProject cvelistV5 (CNA)
Red Hat File Integrity Operator همه CVEProject cvelistV5 (CNA)
Red Hat Gatekeeper 3 همه CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage همه CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage همه CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage همه CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage همه CVEProject cvelistV5 (CNA)
Red Hat Machine Deletion Remediation Operator همه CVEProject cvelistV5 (CNA)
Red Hat Machine Deletion Remediation Operator همه CVEProject cvelistV5 (CNA)
Red Hat Multiarch Tuning Operator همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Node HealthCheck Operator همه CVEProject cvelistV5 (CNA)
Red Hat Node Maintenance Operator همه CVEProject cvelistV5 (CNA)
Red Hat Node Maintenance Operator همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Service Mesh 2 همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Service Mesh 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AMQ Clients همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AMQ Clients همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AMQ Clients همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 5 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 5 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 5 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 5 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 5 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ceph Storage 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Cluster Manager CLI همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)

منابع و راهنماها

۲۸۸
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۱۱/۰۸
آخرین به‌روزرسانی
۱۴۰۵/۰۶/۲۷
وضعیت
منتشرشده
صادرکننده (CNA)
Go

پیش‌بینی بهره‌برداری (EPSS)

۲٫۲۹٪
احتمال بهره‌برداری در ۳۰ روز
۸۳٫۲٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-770
    Allocation of Resources Without Limits or Throttling