CVE-2026-88763: falha de média gravidade em Red Hat Service Interconnect 2 for RHEL 8
Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.5%
A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Red Hat · Service Interconnect 2 for RHEL 8Red Hat · Service Interconnect 2 for RHEL 9CVEs relacionadas — Red Hat Service Interconnect 2 for RHEL 8
No mesmo produto, das mais perigosas para as menos.