1239 lines
51 KiB
JSON
1239 lines
51 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-13732",
|
|
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "redhat",
|
|
"dateReserved": "2026-06-29T14:42:33.339Z",
|
|
"datePublished": "2026-08-31T19:23:18.741Z",
|
|
"dateUpdated": "2026-11-13T12:22:59.561Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"title": "Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf",
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"content": {
|
|
"value": "Important",
|
|
"namespace": "https://access.redhat.com/security/updates/classification/"
|
|
},
|
|
"type": "Red Hat severity rating"
|
|
}
|
|
},
|
|
{
|
|
"cvssV3_1": {
|
|
"attackComplexity": "HIGH",
|
|
"attackVector": "LOCAL",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7,
|
|
"baseSeverity": "HIGH",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"privilegesRequired": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"userInteraction": "REQUIRED",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
|
"version": "3.1"
|
|
},
|
|
"format": "CVSS"
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 10",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:16.3-3.1.el10_2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux:10.2"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:14.2-4.3.el10_0",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux_eus:10.0"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-20.1.el8_10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:8::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-15.1.el8_4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_aus:8.4::appstream",
|
|
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-15.1.el8_4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_aus:8.4::appstream",
|
|
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-18.1.el8_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
|
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-18.1.el8_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
|
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-19.1.el8_8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
|
"cpe:/a:redhat:rhel_tus:8.8::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:8.2-19.1.el8_8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
|
"cpe:/a:redhat:rhel_tus:8.8::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:16.3-3.1.el9_8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:10.2-10.2.el9_2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:10.2-13.1.el9_4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:9.4::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:14.2-4.2.el9_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_eus:9.6::appstream"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Cost Management On-Premise 1",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "costmanagement/costmanagement-ui-rhel10",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791460851",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cost_management_on_premise:1::el10"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Hardened Images",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "gdb-main",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "17.2-6.2.hum1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:hummingbird:1"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-rocm-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259031",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.0::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-tpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259119",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.0::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-spyre-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259034",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.0::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cuda-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259393",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.0::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794260794",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.0::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-rocm-7.1-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794260631",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-neuron-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259404",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-gaudi-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259570",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-tpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259370",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259815",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-spyre-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794260191",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cuda-13.0-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259182",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-rocm-6.4-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259064",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cuda-12.9-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794260782",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cuda-13.0-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259958",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-neuron-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259318",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-gaudi-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259380",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-rubin-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259862",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259110",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-rocm-7.14-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259559",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-tpu-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259807",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-cuda-12.9-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259456",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI 3.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhai/base-image-spyre-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1794259162",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai:3.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/cds-kubernetes-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791978534",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/cds-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791978528",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/haproxy-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791978528",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/installer-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791964013",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/rhua-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791978693",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 6",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_els:6"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 7",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "gdb",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_els:7"
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:73425",
|
|
"name": "RHSA-2026:73425",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:73426",
|
|
"name": "RHSA-2026:73426",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:73427",
|
|
"name": "RHSA-2026:73427",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:79357",
|
|
"name": "RHSA-2026:79357",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82447",
|
|
"name": "RHSA-2026:82447",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82939",
|
|
"name": "RHSA-2026:82939",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:96095",
|
|
"name": "RHSA-2026:96095",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:96096",
|
|
"name": "RHSA-2026:96096",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:96097",
|
|
"name": "RHSA-2026:96097",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:96098",
|
|
"name": "RHSA-2026:96098",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98414",
|
|
"name": "RHSA-2026:98414",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98415",
|
|
"name": "RHSA-2026:98415",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98416",
|
|
"name": "RHSA-2026:98416",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98417",
|
|
"name": "RHSA-2026:98417",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98419",
|
|
"name": "RHSA-2026:98419",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98420",
|
|
"name": "RHSA-2026:98420",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98421",
|
|
"name": "RHSA-2026:98421",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98423",
|
|
"name": "RHSA-2026:98423",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98427",
|
|
"name": "RHSA-2026:98427",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98428",
|
|
"name": "RHSA-2026:98428",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98429",
|
|
"name": "RHSA-2026:98429",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98430",
|
|
"name": "RHSA-2026:98430",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98431",
|
|
"name": "RHSA-2026:98431",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98432",
|
|
"name": "RHSA-2026:98432",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98434",
|
|
"name": "RHSA-2026:98434",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98435",
|
|
"name": "RHSA-2026:98435",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98436",
|
|
"name": "RHSA-2026:98436",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98437",
|
|
"name": "RHSA-2026:98437",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98438",
|
|
"name": "RHSA-2026:98438",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98439",
|
|
"name": "RHSA-2026:98439",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98440",
|
|
"name": "RHSA-2026:98440",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98441",
|
|
"name": "RHSA-2026:98441",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:98443",
|
|
"name": "RHSA-2026:98443",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:99594",
|
|
"name": "RHSA-2026:99594",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:99596",
|
|
"name": "RHSA-2026:99596",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:99597",
|
|
"name": "RHSA-2026:99597",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/security/cve/CVE-2026-13732",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494416",
|
|
"name": "RHBZ#2494416",
|
|
"tags": [
|
|
"issue-tracking",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
}
|
|
],
|
|
"datePublic": "2026-08-06T00:00:00.000Z",
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-787",
|
|
"description": "Out-of-bounds Write",
|
|
"lang": "en",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"x_redhatCweChain": "CWE-787: Out-of-bounds Write",
|
|
"workarounds": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The following practices would help for avoiding exposure and mitigate this\nflaw:\n- Do not open untrusted or unknown ELF binaries in GDB without first\n stripping debug sections. Use `objcopy --remove-section=.stab\n --remove-section=.stabstr <binary>` before debugging.\n- Use `readelf -S <binary> | grep stab` to check for the presence of\n STABS sections before opening a binary in GDB. Legitimate modern\n binaries use DWARF, not STABS.\n- Consider using LLDB or other debuggers that do not support STABS for\n analysis of untrusted binaries.\n- For automated environments (CI, test farms) that invoke GDB on\n potentially untrusted binaries, run GDB in a sandboxed or containerized\n environment with restricted filesystem access.\n- GDB 17+ deprecates STABS support but still parses it. GDB 18 (expected\n late 2026/2027) will remove STABS support entirely.\n- GCC removed STABS emitting in GCC 13 (2023), so legitimately compiled\n binaries from recent GCC versions will not contain STABS data."
|
|
}
|
|
],
|
|
"timeline": [
|
|
{
|
|
"lang": "en",
|
|
"time": "2026-06-29T14:42:56.970Z",
|
|
"value": "Reported to Red Hat."
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"time": "2026-08-06T00:00:00.000Z",
|
|
"value": "Made public."
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Red Hat would like to thank JD Marsters (Bhut Red) for reporting this issue."
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"shortName": "redhat",
|
|
"dateUpdated": "2026-11-13T12:22:59.561Z"
|
|
},
|
|
"x_generator": {
|
|
"engine": "cvelib 1.8.0"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2026-09-01T14:33:22.469791Z",
|
|
"id": "CVE-2026-13732",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "total"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-09-01T14:59:18.300Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |