جزئیات آسیب‌پذیری
CVE-2026-39829
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat External Secrets Operator for Red Hat OpenShiftRed Hat Logging Subsystem for Red Hat OpenShiftRed Hat Multicluster Engine for KubernetesRed Hat OpenShift API for Data Protection
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | External Secrets Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift API for Data Protection | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Virtualization 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift for Windows Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift on AWS | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 17.1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 18.0 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| golang.org/x/crypto | golang.org/x/crypto/ssh | v < 0.52.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۷۵- https://go.dev/cl/781661
- https://pkg.go.dev/vuln/GO-2026-5018
- https://go.dev/issue/79565
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://go.dev/cl/781641
- https://access.redhat.com/security/cve/CVE-2026-39829 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2480681 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36199 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29455 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37123 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46903 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57191 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54400 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60454 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60446 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60477 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57801 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57365 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48693 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36820 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52910 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65964 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40972 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40974 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40969 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37271 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37268 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37272 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37278 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37296 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59593 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54432 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46885 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47949 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41055 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47735 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59559 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36883 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Go
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۶٪
احتمال بهره‌برداری در ۳۰ روز
۴۰٫۶٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-1284Improper Validation of Specified Quantity in Input