Vulnerability-Lookup

RHSA-2026:76145

Vulnerability from csaf_redhat - Published: 2026-10-05 19:25 - Updated: 2026-10-06 08:38

Summary

Red Hat Security Advisory: Red Hat build of Kueue 1.4.3 release

Severity

Important

Notes

Topic: Red Hat build of Kueue 1.4.3 release

Details: The Red Hat build of Kueue is an optional operator, based on Kueue upstream, to enable the installation of Kueue on Openshift. Kueue is a queueing framework for managing Kubernetes workloads. This release is based on Kueue v0.18.11

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64	—	Vendor Fix fix

Known not affected 9 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x		—
Unresolved product id: Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64		—

Threats

Impact Important

References

19 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:76145	self
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/openshif…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat build of Kueue 1.4.3 release",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat build of Kueue is an optional operator, based on Kueue upstream,\nto enable the installation of Kueue on Openshift.\nKueue is a queueing framework for managing Kubernetes workloads.\n\nThis release is based on Kueue v0.18.11",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:76145",
        "url": "https://access.redhat.com/errata/RHSA-2026:76145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/ai_workloads/red-hat-build-of-kueue",
        "url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/ai_workloads/red-hat-build-of-kueue"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76145.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Kueue 1.4.3 release",
    "tracking": {
      "current_release_date": "2026-10-06T08:38:24+00:00",
      "generator": {
        "date": "2026-10-06T08:38:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:76145",
      "initial_release_date": "2026-10-05T19:25:13+00:00",
      "revision_history": [
        {
          "date": "2026-10-05T19:25:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-05T19:25:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-06T08:38:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Kueue 1.4",
                "product": {
                  "name": "Red Hat build of Kueue 1.4",
                  "product_id": "Red Hat build of Kueue 1.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:kueue_operator:1.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Kueue"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
                  "product_id": "registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-operator-rhel9-operator-bundle@sha256%3Af7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f?arch=amd64\u0026repository_url=registry.redhat.io/kueue/kueue-operator-bundle\u0026tag=1791226617"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
                  "product_id": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-must-gather@sha256%3Ae33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff?arch=amd64\u0026repository_url=registry.redhat.io/kueue/kueue-must-gather-rhel9\u0026tag=1791211162"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue@sha256%3A8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408?arch=amd64\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9\u0026tag=1791218455"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-operator-rhel9-operator@sha256%3Af47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2?arch=amd64\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9-operator\u0026tag=1791211023"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
                  "product_id": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-must-gather@sha256%3Aee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139?arch=arm64\u0026repository_url=registry.redhat.io/kueue/kueue-must-gather-rhel9\u0026tag=1791211162"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue@sha256%3Aefabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27?arch=arm64\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9\u0026tag=1791218455"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-operator-rhel9-operator@sha256%3Adcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557?arch=arm64\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9-operator\u0026tag=1791211023"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
                  "product_id": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-must-gather@sha256%3A91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3?arch=ppc64le\u0026repository_url=registry.redhat.io/kueue/kueue-must-gather-rhel9\u0026tag=1791211162"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue@sha256%3A613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85?arch=ppc64le\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9\u0026tag=1791218455"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-operator-rhel9-operator@sha256%3A322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738?arch=ppc64le\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9-operator\u0026tag=1791211023"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
                  "product_id": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-must-gather@sha256%3A97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad?arch=s390x\u0026repository_url=registry.redhat.io/kueue/kueue-must-gather-rhel9\u0026tag=1791211162"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue@sha256%3Ae4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266?arch=s390x\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9\u0026tag=1791218455"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
                "product": {
                  "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
                  "product_id": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kueue-operator-rhel9-operator@sha256%3Ad62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137?arch=s390x\u0026repository_url=registry.redhat.io/kueue/kueue-rhel9-operator\u0026tag=1791211023"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64 as a component of Red Hat build of Kueue 1.4",
          "product_id": "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64"
        },
        "product_reference": "registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64",
        "relates_to_product_reference": "Red Hat build of Kueue 1.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64"
        ],
        "known_not_affected": [
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
          "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-05T19:25:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.",
          "product_ids": [
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:76145"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:91669ed8aaad278329dd6b544cf0ebf19061310f4a99b07b0aa861873f33bde3_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:97508eb43619c40e47e759de819c462851a0a68e816c425757ca31f926d7edad_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:e33c83b12c87ecc22c6ca3a9f6e680a5ce72ec3ea6bd7cfe378da92c6f9a53ff_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:ee5f4fd8654e54054bacf31418aa66aa7f9a342d25b51d29d1587c44309a2139_arm64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-operator-bundle@sha256:f7925659cdf32dfd36e6e0ee90970279d2a0903231f37c3c860885a9dc933e7f_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:322897814ae4102f04051b269897e6ec306c0f6c571a7762b3e4f3c5c8ae7738_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:d62ccde8ac0936f596de78758f1ef27bd1595421458cf9d24702d02087812137_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:dcd27eb28dc73ce42edf6c98bc689a826ba83e4078324e9034058f5a43666557_arm64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9-operator@sha256:f47fa29a184136e61fb776b69df56aeab49c9d1b440921ea29aa3bc972779af2_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:613f8fecd2736abaf821ff6d03caa29a5e9516a8ac9f66e9a8a6c29d8531ed85_ppc64le",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:8dcd2823385875594d2d0e8c23c008133fcc04bdb2a13f04e85f0e5a7ff72408_amd64",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:e4979499cb0d225d34d6d276e3ed4c8f978bdea9f179fd9284cba986e3fe5266_s390x",
            "Red Hat build of Kueue 1.4:registry.redhat.io/kueue/kueue-rhel9@sha256:efabcf6c984d17ed1e4ca50af5f28daf3afa1967d60b3d08237aedcb8807fc27_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    }
  ]
}

CVE-2026-84445 (GCVE-0-2026-84445)

Vulnerability from cvelistv5 – Published: 2026-09-14 16:11 – Updated: 2026-09-14 16:36

Title

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-14 16:36 UTC

CWE

CWE-129 - Improper Validation of Array Index
CWE-248 - Uncaught Exception

Assigner

GitHub_M mitre root Scorecard

References

10 references

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM
https://github.com/grpc/grpc-go/issues/9354	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9365	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9366	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9367	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/3822494d8e…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/8668b69c16…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/93e31b4854…	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.82.2 Affected: >= 1.83.0, < 1.83.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84445",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T16:36:00.554548Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T16:36:14.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.82.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.83.0, \u003c 1.83.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129: Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T16:11:41.401Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        },
        {
          "name": "https://github.com/grpc/grpc-go/issues/9354",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9365",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9366",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9367",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        }
      ],
      "source": {
        "advisory": "GHSA-2v4p-qf9q-27wj",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84445",
    "datePublished": "2026-09-14T16:11:41.401Z",
    "dateReserved": "2026-09-01T20:05:09.422Z",
    "dateUpdated": "2026-09-14T16:36:14.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:76145

CVE-2026-84445 (GCVE-0-2026-84445)

Tags

Sightings

Nomenclature

Related by attack behaviour