جزئیات آسیب‌پذیری
CVE-2026-33815
Red Hat Custom Metric Autoscaler operator for Red Hat OpenshiftRed Hat Multicluster Engine for KubernetesRed Hat Multicluster Global HubRed Hat OpenShift PipelinesRed Hat 3scale API Management Platform 2Red Hat Advanced Cluster Security 4
CVE-2026-33815 in github.com/jackc/pgx
CVSS 3.1
8.3بالا
شرح رسمی (انگلیسی)
Memory-safety vulnerability in github.com/jackc/pgx/v5.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 8.3بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Hardened Images | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| github.com/jackc/pgx/v5 | github.com/jackc/pgx/v5/pgproto3 | v < 5.9.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۱- https://pkg.go.dev/vuln/GO-2026-4771
- https://access.redhat.com/security/cve/CVE-2026-33815 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2455975 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33815.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26636 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22423 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24503 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60388 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11070 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11217 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13791 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13829 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40984 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24479 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24475 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24482 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۱۸
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Go
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۲٪
احتمال بهره‌برداری در ۳۰ روز
۵۰٫۳٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-787Out-of-bounds Write