RHSA-2026:70615
Vulnerability from csaf_redhat - Published: 2026-10-01 16:01 - Updated: 2026-10-02 17:35Summary
Red Hat Security Advisory: OpenShift Container Platform 4.18.56 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.18.56 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.18.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.18.56. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:70614
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Security Fix(es):
* urllib3: urllib3: Unbounded decompression chain leads to resource
exhaustion (CVE-2025-66418)
* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
(CVE-2026-3039)
* bind: BIND: Denial of Service via specially crafted DNS messages
(CVE-2026-5946)
* dracut: dracut: Root code execution via DHCP options command injection
(CVE-2026-6893)
* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
(CVE-2026-13321)
* dracut: dracut: root code execution via unescaped error message written
to sourced emergency hook script in die() (CVE-2026-15816)
* libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via
dangling filtered_buf pointer in init_unpack() (CVE-2026-14164)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
A flaw was found in BIND 9, a widely used Domain Name System (DNS) software. A remote attacker could exploit this by sending specially crafted, excessively long DNS queries. This could bypass Response Policy Zone (RPZ) rules, which are designed to block access to malicious domains, and potentially cause the BIND 9 software to crash, leading to a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.
8.6 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Moderate
A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2025-66418
Threats
Impact
Important
References
50 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.18.56 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.18.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.18.56. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHSA-2026:70614\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nSecurity Fix(es):\n\n* urllib3: urllib3: Unbounded decompression chain leads to resource\nexhaustion (CVE-2025-66418)\n* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation\n(CVE-2026-3039)\n* bind: BIND: Denial of Service via specially crafted DNS messages\n(CVE-2026-5946)\n* dracut: dracut: Root code execution via DHCP options command injection\n(CVE-2026-6893)\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field\n(CVE-2026-13321)\n* dracut: dracut: root code execution via unescaped error message written\nto sourced emergency hook script in die() (CVE-2026-15816)\n* libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via\ndangling filtered_buf pointer in init_unpack() (CVE-2026-14164)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:70615",
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2459963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459963"
},
{
"category": "external",
"summary": "2479767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
},
{
"category": "external",
"summary": "2479771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
},
{
"category": "external",
"summary": "2493411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493411"
},
{
"category": "external",
"summary": "2500889",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500889"
},
{
"category": "external",
"summary": "2503721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
},
{
"category": "external",
"summary": "2504166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70615.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.18.56 bug fix and security update",
"tracking": {
"current_release_date": "2026-10-02T17:35:12+00:00",
"generator": {
"date": "2026-10-02T17:35:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:70615",
"initial_release_date": "2026-10-01T16:01:59+00:00",
"revision_history": [
{
"date": "2026-10-01T16:01:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-01T16:01:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-02T17:35:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.18",
"product": {
"name": "Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-418.94.202609171815-0",
"product": {
"name": "rhcos-aarch64-418.94.202609171815-0",
"product_id": "rhcos-aarch64-418.94.202609171815-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202609171815?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-418.94.202609171815-0",
"product": {
"name": "rhcos-ppc64le-418.94.202609171815-0",
"product_id": "rhcos-ppc64le-418.94.202609171815-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202609171815?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-418.94.202609171815-0",
"product": {
"name": "rhcos-s390x-418.94.202609171815-0",
"product_id": "rhcos-s390x-418.94.202609171815-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202609171815?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-418.94.202609171815-0",
"product": {
"name": "rhcos-x86_64-418.94.202609171815-0",
"product_id": "rhcos-x86_64-418.94.202609171815-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202609171815?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-418.94.202609171815-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0"
},
"product_reference": "rhcos-aarch64-418.94.202609171815-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-418.94.202609171815-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0"
},
"product_reference": "rhcos-ppc64le-418.94.202609171815-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-418.94.202609171815-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0"
},
"product_reference": "rhcos-s390x-418.94.202609171815-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-418.94.202609171815-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
},
"product_reference": "rhcos-x86_64-418.94.202609171815-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the urllib3 HTTP client library allows uncontrolled memory consumption when decompressing highly compressed HTTP responses. Due to the lack of an overall decompression size limit in the Streaming API, a malicious server can exhaust client memory, leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2026-3039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-19T09:48:19.212000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479767"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: BIND servers configured for TKEY-based GSS-API authentication are vulnerable to memory exhaustion when processing maliciously-constructed packets. This can lead to a denial of service, specifically impacting Red Hat deployments integrated with Active Directory or Kerberos for DNS where this authentication method is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3039"
},
{
"category": "external",
"summary": "RHBZ#2479767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039"
}
],
"release_date": "2026-05-21T12:24:11.051000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nExample:\n```bash\n# Edit /etc/named.conf and remove or comment out lines related to tkey-gssapi-keytab or tkey-gssapi-credential.\n# For example, remove or comment out:\n# key \"gssapi-key\" {\n# algorithm GSSAPI;\n# secret \"BASE64_ENCODED_KEY\";\n# };\n#\n# Then reload the named service:\nsystemctl reload named\n```\nReloading the `named` service may cause a brief interruption in DNS resolution.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation"
},
{
"cve": "CVE-2026-5946",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-05-19T09:57:49.705000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: BIND: Denial of Service via specially crafted DNS messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important denial of service vulnerability. The `named` daemon is susceptible to crashes when processing specially crafted DNS messages that utilize non-Internet (IN) classes or meta-classes. This can lead to service unavailability if an attacker sends malicious requests targeting recursion, dynamic updates, zone change notifications, or specific record type processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5946"
},
{
"category": "external",
"summary": "RHBZ#2479771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5946"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946"
}
],
"release_date": "2026-05-21T12:32:55.602000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: BIND: Denial of Service via specially crafted DNS messages"
},
{
"acknowledgments": [
{
"names": [
"AISLE Research"
]
}
],
"cve": "CVE-2026-6893",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-04-21T02:37:23+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459963"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut\u0027s legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system\u0027s boot and network behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dracut: dracut: Root code execution via DHCP options command injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in dracut\u0027s legacy DHCP client script (`dhclient-script.sh`) that allows command injection. An attacker on the adjacent network can exploit this by providing specially crafted DHCP options, leading to root code execution within the initramfs. This primarily affects systems configured to use DHCP for network setup during the initial boot phase.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6893"
},
{
"category": "external",
"summary": "RHBZ#2459963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6893"
}
],
"release_date": "2026-06-10T19:39:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that systems configured to obtain network settings via DHCP in the initramfs are only booted on trusted networks. This vulnerability requires an attacker to control a DHCP server on the adjacent network segment. If network configuration via DHCP is not strictly necessary during the initramfs phase, consider using static network configuration.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dracut: dracut: Root code execution via DHCP options command injection"
},
{
"cve": "CVE-2026-11331",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2026-07-21T16:15:37.317000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503721"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BIND 9, a widely used Domain Name System (DNS) software. A remote attacker could exploit this by sending specially crafted, excessively long DNS queries. This could bypass Response Policy Zone (RPZ) rules, which are designed to block access to malicious domains, and potentially cause the BIND 9 software to crash, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind9: bind: Potential wildcard CNAME RPZ policy bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11331"
},
{
"category": "external",
"summary": "RHBZ#2503721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11331"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind9: bind: Potential wildcard CNAME RPZ policy bypass"
},
{
"cve": "CVE-2026-13321",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2026-07-21T19:40:30.464000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504166"
}
],
"notes": [
{
"category": "description",
"text": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer\u0027s zone.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An attacker controlling any DNSSEC-signed zone can craft NSEC records that span into victim zones, enabling cross-zone cache poisoning with authenticated denial-of-service responses (AD=1).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13321"
},
{
"category": "external",
"summary": "RHBZ#2504166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "Disclaimer: The following mitigation notes are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nISC states no workarounds exist. Until patched, restrict the resolver to authorized client networks and deploy separate resolvers per trust zone. Memory hardening and auth controls don\u0027t apply \u2014 this is a DNS protocol logic error using validly-signed records.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field"
},
{
"cve": "CVE-2026-14164",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"discovery_date": "2026-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493411"
}
],
"notes": [
{
"category": "description",
"text": "A double free issue has been identified in libarchive\u0027s RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has assessed this CVE as 7.5 CVSS with Moderate security Impact. This assessment reflects the library\u0027s typical deployment within enterprise software, where libarchive is frequently embedded into automated, network-accessible services that receive and process archives originating from remote sources. In these environments, a specially crafted RAR5 archive may be delivered and processed automatically without requiring direct user interaction, allowing a remote attacker to trigger the vulnerability and cause the affected application or service processing the archive to terminate unexpectedly, resulting in a denial of service.\n\nFrom a standalone library perspective, however, the vulnerable code is only reached when an application opens and processes a crafted RAR5 archive. Evaluating libarchive in isolation, without considering downstream deployment models, the vulnerability more closely aligns with a CVSS score of 5.5-CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (Moderate), reflecting an Attack Vector of Local (AV:L) and User Interaction Required (UI:R). This is because the crafted archive must first be delivered to and processed by a local application before the vulnerable parsing logic is executed. \n\nRed Hat\u0027s assigned score instead reflects the operational deployment of libarchive in automated, network-facing workloads in downstream environment models rather than the standalone library in isolation.\n\n```\n\nThis vulnerability only affects libarchive releases that include support for the RAR5 archive format. RAR5 support was first introduced upstream in libarchive 3.4.0 (https://github.com/libarchive/libarchive/wiki/ReleaseNotes#libarchive-340). Earlier libarchive releases do not contain the vulnerable RAR5 parsing code and are therefore not affected.\n\nRed Hat Enterprise Linux 6, 7, and 8 ship Libarchive versions prior to v3.4.0 that do not include RAR5 support and are therefore not affected.\n\n```",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14164"
},
{
"category": "external",
"summary": "RHBZ#2493411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14164"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14164",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14164"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/issues/3069",
"url": "https://github.com/libarchive/libarchive/issues/3069"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/3071",
"url": "https://github.com/libarchive/libarchive/pull/3071"
}
],
"release_date": "2026-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update once it becomes available.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()"
},
{
"acknowledgments": [
{
"names": [
"Pavel Valena"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-15816",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-06-10T19:21:21+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500889"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates this flaw\u0027s impact as Important. Exploitation requires an attacker-controlled or spoofed DHCP server on the same network segment as a system performing network boot (root=dhcp/netroot=dhcp), and for the DHCP-supplied ROOT_PATH value to fail dracut\u0027s netroot handler resolution -- both fully within an adjacent-network attacker\u0027s control. Reaching the point where the poisoned hook script is actually sourced depends on dracut\u0027s boot-failure handling reinvoking the emergency shell mechanism, which occurs by default when the netroot handler cannot be resolved. This is a separate code path from CVE-2026-6893, which patched modules.d/35network-legacy/dhclient-script.sh but did not modify dracut-lib.sh\u0027s die() function. Systems that do not perform network/PXE boot, or that do not rely on DHCP-supplied ROOT_PATH values, are not exposed to this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15816"
},
{
"category": "external",
"summary": "RHBZ#2500889",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500889"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15816"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2459963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459963"
},
{
"category": "external",
"summary": "https://github.com/dracutdevs/dracut/blob/master/modules.d/40network/netroot.sh",
"url": "https://github.com/dracutdevs/dracut/blob/master/modules.d/40network/netroot.sh"
},
{
"category": "external",
"summary": "https://github.com/dracutdevs/dracut/blob/master/modules.d/99base/dracut-lib.sh",
"url": "https://github.com/dracutdevs/dracut/blob/master/modules.d/99base/dracut-lib.sh"
}
],
"release_date": "2026-08-05T23:59:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-01T16:01:59+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is\nsha256:630c143e63c6024267bf6f66cfc7c84366eb8a9dc022eaf7b411b8e1474ca183\n\n (For s390x architecture)\n The image digest is\nsha256:c8c83e4f0f69910e8c6b49781e588daf810d5d39dbfa00d4ab3303b6b3ea8344\n\n (For ppc64le architecture)\n The image digest is\nsha256:d2c057433a1cfa2470110843b7820d42ffa5f29043eb245a7bc07e7b06b5b561\n\n (For aarch64 architecture)\n The image digest is\nsha256:b35c9facdf6f1920dc6feb4d9b7a4699608ee6ae70dba55f7fc9a45218b16f8d\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70615"
},
{
"category": "workaround",
"details": "Restrict DHCP server access on networks used for network boot (DHCP snooping, dedicated/trusted provisioning VLANs) until a fix is available.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202609171815-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202609171815-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…