Vulnerability-Lookup

RHBA-2025:14522

Vulnerability from csaf_redhat - Published: 2025-09-02 05:09 - Updated: 2026-08-07 13:42

Summary

Red Hat Bug Fix Advisory: Red Hat Quay v3.11.13 bug fix release

Severity

Important

Notes

Topic: Red Hat Quay 3.11.13 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Quay 3.11.13

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-32023

A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le	—	Vendor Fix fix Workaround

Threats

Impact Important

References

12 references

URL	Category
https://access.redhat.com/errata/RHBA-2025:14522	self
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-32023	self
https://bugzilla.redhat.com/show_bug.cgi?id=2376858	external
https://www.cve.org/CVERecord?id=CVE-2025-32023	external
https://nvd.nist.gov/vuln/detail/CVE-2025-32023	external
https://github.com/redis/redis/commit/50188747cbf…	external
https://github.com/redis/redis/releases/tag/6.2.19	external
https://github.com/redis/redis/releases/tag/7.2.10	external
https://github.com/redis/redis/releases/tag/7.4.5	external
https://github.com/redis/redis/releases/tag/8.0.3	external
https://github.com/redis/redis/security/advisorie…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.11.13 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.11.13",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:14522",
        "url": "https://access.redhat.com/errata/RHBA-2025:14522"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_14522.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.11.13 bug fix release",
    "tracking": {
      "current_release_date": "2026-08-07T13:42:03+00:00",
      "generator": {
        "date": "2026-08-07T13:42:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHBA-2025:14522",
      "initial_release_date": "2025-09-02T05:09:28+00:00",
      "revision_history": [
        {
          "date": "2025-09-02T05:09:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-02T05:09:28+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-07T13:42:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
                  "product_id": "quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.11.13-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
                  "product_id": "quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.11.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.11.13-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.11.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
                  "product_id": "quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.11.13-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.11.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
                  "product_id": "quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.11.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32023",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-07-07T16:01:22.982604+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw can only be exploited by an authenticated attacker when the Redis server has hyperloglog operations implemented, limiting the impact of this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-32023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/6.2.19",
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.2.10",
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.5",
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/8.0.3",
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        }
      ],
      "release_date": "2025-07-07T15:22:19.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-02T05:09:28+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:14522"
        },
        {
          "category": "workaround",
          "details": "Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f1d6bdc63e86ca0a0c61a57d41607cc7fa731fe94d2c745439928f47546c3027_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability"
    }
  ]
}

CVE-2025-32023 (GCVE-0-2025-32023)

Vulnerability from cvelistv5 – Published: 2025-07-07 15:22 – Updated: 2026-02-04 19:26

Title

Redis allows out of bounds writes in hyperloglog commands leading to RCE

Summary

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-07 15:43 UTC

CWE

CWE-680 - Integer Overflow to Buffer Overflow

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/redis/redis/security/advisorie…	x_refsource_CONFIRM
https://github.com/redis/redis/commit/50188747cbf…	x_refsource_MISC
https://github.com/redis/redis/releases/tag/6.2.19	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.2.10	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.4.5	x_refsource_MISC
https://github.com/redis/redis/releases/tag/8.0.3	x_refsource_MISC
https://www.exploit-db.com/exploits/52477

Impacted products

1 product

Vendor	Product	Version
redis	redis	Affected: >= 8.0.0, < 8.0.3 Affected: >= 7.4-rc1, < 7.4.5 Affected: >= 7.0.0, < 7.2.10 Affected: >= 2.8.0, < 6.2.19

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32023",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-07T15:43:02.576291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-07T15:43:15.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-04T19:26:46.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/52477"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "redis",
          "vendor": "redis",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 8.0.0, \u003c 8.0.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.4-rc1, \u003c 7.4.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.2.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.8.0, \u003c 6.2.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-680",
              "description": "CWE-680: Integer Overflow to Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-07T15:22:19.155Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        },
        {
          "name": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/6.2.19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.2.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.4.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/8.0.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        }
      ],
      "source": {
        "advisory": "GHSA-rp2m-q4j6-gr43",
        "discovery": "UNKNOWN"
      },
      "title": "Redis allows out of bounds writes in hyperloglog commands leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-32023",
    "datePublished": "2025-07-07T15:22:19.155Z",
    "dateReserved": "2025-04-01T21:57:32.955Z",
    "dateUpdated": "2026-02-04T19:26:46.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.