جزئیات آسیب‌پذیری
CVE-2026-39830
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat External Secrets Operator for Red Hat OpenShiftRed Hat Multicluster Engine for KubernetesRed Hat OpenShift PipelinesRed Hat OpenShift Serverless
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.1بحرانی | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | External Secrets Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Security 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Dev Spaces | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Virtualization 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift for Windows Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift for Windows Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift on AWS | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 17.1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| golang.org/x/crypto | golang.org/x/crypto/ssh | v < 0.52.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۶۰- https://go.dev/issue/79564
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://go.dev/cl/781640
- https://go.dev/cl/781664
- https://pkg.go.dev/vuln/GO-2026-5017
- https://access.redhat.com/security/cve/CVE-2026-39830 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2480684 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36199 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29455 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66521 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54400 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57801 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52910 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65964 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40972 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40974 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40969 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37271 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37268 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37272 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37278 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37296 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46885 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47735 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Go
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۸٪
احتمال بهره‌برداری در ۳۰ روز
۵۲٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-772Missing Release of Resource after Effective Lifetime