1042 lines
43 KiB
JSON
1042 lines
43 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-13757",
|
|
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "redhat",
|
|
"dateReserved": "2026-06-29T17:43:59.500Z",
|
|
"datePublished": "2026-06-29T18:44:24.583Z",
|
|
"dateUpdated": "2026-11-06T07:39:27.017Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"title": "P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing",
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"content": {
|
|
"value": "Moderate",
|
|
"namespace": "https://access.redhat.com/security/updates/classification/"
|
|
},
|
|
"type": "Red Hat severity rating"
|
|
}
|
|
},
|
|
{
|
|
"cvssV3_1": {
|
|
"attackComplexity": "LOW",
|
|
"attackVector": "LOCAL",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 6.2,
|
|
"baseSeverity": "MEDIUM",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "NONE",
|
|
"privilegesRequired": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"userInteraction": "NONE",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
|
"version": "3.1"
|
|
},
|
|
"format": "CVSS"
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 10",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:0.26.4-1.el10_2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux:10.2"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:0.26.4-1.el9_8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:0.26.4-1.el9_8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.17",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791371080",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.17::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.17",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791371069",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.17::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.17",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791788287",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.17::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.17",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791378395",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.17::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.17",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-bundle",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791970484",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.17::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.18",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791459707",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.18::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.18",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791459711",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.18::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.18",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791459759",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.18::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.18",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1789029076",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.18::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.18",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-bundle",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1791966259",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.18::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790223279",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790223719",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790272426",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790589998",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790589912",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790589914",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-operator-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790589855",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/cert-manager-trust-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790598593",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.20::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Cost Management 4",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1790844333",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cost_management:4::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Discovery 2",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "discovery/discovery-server-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786638573",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:discovery:2::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Discovery 2",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "discovery/discovery-ui-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786634825",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:discovery:2::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Hardened Images",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "p11-kit-main",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0.26.2-1.2.hum1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:hummingbird:1"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Hardened Images",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "p11-kit-main",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0.26.4-1.hum1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:hummingbird:1"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Insights proxy 1.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "insights-proxy/insights-proxy-container-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786433656",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:insights_proxy:1.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/cds-kubernetes-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786435241",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/cds-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786533457",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/haproxy-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786533449",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/installer-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786435483",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/rhua-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1786533529",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/cds-kubernetes-tp-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1787241211",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/installer-tp-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1787135742",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Update Infrastructure 5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhui5/rhua-tp-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1787241260",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhui:5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 6",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_els:6"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 7",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_els:7"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "p11-kit",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift AI (RHOAI)",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
|
|
"defaultStatus": "unaffected",
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_ai"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift Container Platform 4",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "openshift/ose-rhel-coreos-8",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift:4"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift Container Platform 4",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "openshift/ose-rhel-coreos-9",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift:4"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift Container Platform 5",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "openshift/ose-rhel-coreos-9",
|
|
"defaultStatus": "affected",
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift:5"
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:37469",
|
|
"name": "RHSA-2026:37469",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:38342",
|
|
"name": "RHSA-2026:38342",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:49667",
|
|
"name": "RHSA-2026:49667",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:49668",
|
|
"name": "RHSA-2026:49668",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:53371",
|
|
"name": "RHSA-2026:53371",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:54387",
|
|
"name": "RHSA-2026:54387",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:54760",
|
|
"name": "RHSA-2026:54760",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:58981",
|
|
"name": "RHSA-2026:58981",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72394",
|
|
"name": "RHSA-2026:72394",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72395",
|
|
"name": "RHSA-2026:72395",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72399",
|
|
"name": "RHSA-2026:72399",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72470",
|
|
"name": "RHSA-2026:72470",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72475",
|
|
"name": "RHSA-2026:72475",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72476",
|
|
"name": "RHSA-2026:72476",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:72502",
|
|
"name": "RHSA-2026:72502",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:81201",
|
|
"name": "RHSA-2026:81201",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82304",
|
|
"name": "RHSA-2026:82304",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82322",
|
|
"name": "RHSA-2026:82322",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82336",
|
|
"name": "RHSA-2026:82336",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82347",
|
|
"name": "RHSA-2026:82347",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82354",
|
|
"name": "RHSA-2026:82354",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82372",
|
|
"name": "RHSA-2026:82372",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82857",
|
|
"name": "RHSA-2026:82857",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:82888",
|
|
"name": "RHSA-2026:82888",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/security/cve/CVE-2026-13757",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494556",
|
|
"name": "RHBZ#2494556",
|
|
"tags": [
|
|
"issue-tracking",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://github.com/advisories/GHSA-p2wm-69qx-x25w"
|
|
}
|
|
],
|
|
"datePublic": "2026-06-23T00:00:00.000Z",
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-674",
|
|
"description": "Uncontrolled Recursion",
|
|
"lang": "en",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"x_redhatCweChain": "CWE-674: Uncontrolled Recursion",
|
|
"workarounds": [
|
|
{
|
|
"lang": "en",
|
|
"value": "This CVE requires same-user access to the p11-kit RPC Unix domain socket (/run/user/<uid>/p11-kit/pkcs11-*). Any process running as the socket-owning user can trigger the crash without further authentication.\n\nIf p11-kit is managed via systemd --user, ensure `Restart=on-failure` is set in the unit file so that a crash is automatically recovered without manual intervention.\n\nRed Hat recommends updating p11-kit to version 0.26.3 or later, which introduces a recursion depth limit in the RPC attribute parsing and fully addresses this flaw."
|
|
}
|
|
],
|
|
"timeline": [
|
|
{
|
|
"lang": "en",
|
|
"time": "2026-06-23T00:00:00.000Z",
|
|
"value": "Reported to Red Hat."
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"time": "2026-06-23T00:00:00.000Z",
|
|
"value": "Made public."
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"shortName": "redhat",
|
|
"dateUpdated": "2026-11-06T07:39:27.017Z"
|
|
},
|
|
"x_generator": {
|
|
"engine": "cvelib 1.8.0"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2026-07-01T14:21:14.619672Z",
|
|
"id": "CVE-2026-13757",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "partial"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-07-01T14:21:43.532Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |