جزئیات آسیب‌پذیری

CVE-2026-32283

Go standard library crypto/tlsRed Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Builds for Red Hat OpenShiftRed Hat Confidential Compute AttestationRed Hat Deployment Validation OperatorRed Hat External Secrets Operator for Red Hat OpenShift

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

CVSS 3.1
7.5بالا

شرح رسمی (انگلیسی)

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.5بالا 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5بالا 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Go standard library crypto/tls v < 1.25.9 CVEProject cvelistV5 (CNA)
Go standard library crypto/tls 1.26.0-0 ≤ v < 1.26.2 CVEProject cvelistV5 (CNA)
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Builds for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Deployment Validation Operator همه CVEProject cvelistV5 (CNA)
Red Hat External Secrets Operator for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat ExternalDNS Operator همه CVEProject cvelistV5 (CNA)
Red Hat Fence Agents Remediation Operator همه CVEProject cvelistV5 (CNA)
Red Hat File Integrity Operator همه CVEProject cvelistV5 (CNA)
Red Hat Gatekeeper 3 همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage همه CVEProject cvelistV5 (CNA)
Red Hat Machine Deletion Remediation Operator همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes همه CVEProject cvelistV5 (CNA)
Red Hat Node HealthCheck Operator همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Service Mesh 2 همه CVEProject cvelistV5 (CNA)
Red Hat Power monitoring for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat AMQ Broker 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Security 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Developer Hub همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Edge Manager 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat JBoss Web Server 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Cluster Manager CLI همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Dev Spaces همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Dev Workspaces Operator همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift GitOps همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift for Windows Containers همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift on AWS همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 16.2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 16.2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 17.1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 17.1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 17.1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 18.0 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Openshift Data Foundation 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Quay 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Satellite 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Satellite 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Trusted Artifact Signer همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apache Camel - HawtIO 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 2 همه CVEProject cvelistV5 (CNA)
Red Hat Security Profiles Operator همه CVEProject cvelistV5 (CNA)
Red Hat Zero Trust Workload Identity Manager همه CVEProject cvelistV5 (CNA)
Red Hat Zero Trust Workload Identity Manager - Tech Preview همه CVEProject cvelistV5 (CNA)
Red Hat cert-manager Operator for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱۴۳
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۱/۱۹
آخرین به‌روزرسانی
۱۴۰۵/۰۶/۲۷
وضعیت
منتشرشده
صادرکننده (CNA)
Go

پیش‌بینی بهره‌برداری (EPSS)

۰٫۶۳٪
احتمال بهره‌برداری در ۳۰ روز
۵۰٫۵٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-764
    Multiple Locks of a Critical Resource