Vulnerability-Lookup

RHSA-2026:92622

Vulnerability from csaf_redhat - Published: 2026-10-29 19:41 - Updated: 2026-10-30 00:50

Summary

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Severity

Important

Notes

Topic: An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * receptor: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * receptor: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * receptor: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details about this release, refer to the release notes listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-78667

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 11 products

Product	Version	Remediation
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64	—	Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64	—	Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64	—	Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64	—	Workaround
Unresolved product id: 10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 7 products, the same list as for CVE-2026-78667

Known not affected 11 products, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-97031

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 7 products, the same list as for CVE-2026-78667

Known not affected 11 products, the same list as for CVE-2026-78667

Threats

Impact Important

References

32 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:92622	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2548334	external
https://bugzilla.redhat.com/show_bug.cgi?id=2548336	external
https://bugzilla.redhat.com/show_bug.cgi?id=2548344	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-78667	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548334	external
https://www.cve.org/CVERecord?id=CVE-2026-78667	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78667	external
https://go.dev/cl/847309	external
https://go.dev/issue/81858	external
https://groups.google.com/g/golang-announce/c/U2f…	external
https://pkg.go.dev/vuln/GO-2026-6609	external
https://access.redhat.com/security/cve/CVE-2026-78669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344	external
https://www.cve.org/CVERecord?id=CVE-2026-78669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669	external
https://go.dev/cl/847186	external
https://go.dev/cl/847308	external
https://go.dev/issue/81742	external
https://groups.google.com/g/golang-announce/c/ZPw…	external
https://pkg.go.dev/vuln/GO-2026-6611	external
https://access.redhat.com/security/cve/CVE-2026-97031	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548336	external
https://www.cve.org/CVERecord?id=CVE-2026-97031	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97031	external
https://go.dev/cl/847312	external
https://go.dev/issue/81855	external
https://pkg.go.dev/vuln/GO-2026-6607	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat Ansible Automation Platform 2.7\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Ansible Automation Platform provides an enterprise framework for\nbuilding, deploying and managing IT automation at scale. IT Managers can\nprovide top-down guidelines on how automation is applied to individual\nteams, while automation developers retain the freedom to write tasks that\nleverage existing knowledge without the overhead. Ansible Automation\nPlatform makes it possible for users across an organization to share, vet,\nand manage automation content by means of a simple, powerful, and agentless\nlanguage.\n\nSecurity Fix(es):\n\n* receptor: net/http: Denial of Service via excessive HTTP/2 SETTINGS\nframes (CVE-2026-78669)\n* receptor: golang: Denial of Service via crafted HTTP Range headers\n(CVE-2026-78667)\n* receptor: crypto/tls: Denial of Service via multiple ECH outer extension\nreferences (CVE-2026-97031)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nFor details about this release, refer to the release notes listed in the\nReferences section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:92622",
        "url": "https://access.redhat.com/errata/RHSA-2026:92622"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade"
      },
      {
        "category": "external",
        "summary": "2548334",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
      },
      {
        "category": "external",
        "summary": "2548336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
      },
      {
        "category": "external",
        "summary": "2548344",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92622.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update",
    "tracking": {
      "current_release_date": "2026-10-30T00:50:43+00:00",
      "generator": {
        "date": "2026-10-30T00:50:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:92622",
      "initial_release_date": "2026-10-29T19:41:33+00:00",
      "revision_history": [
        {
          "date": "2026-10-29T19:41:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-29T19:41:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-30T00:50:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
                  "product_id": "10Base-Ansible-Automation-Platform-2.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                  "product_id": "9Base-Ansible-Automation-Platform-2.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                  "product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ansible Automation Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el10ap.src",
                "product": {
                  "name": "receptor-0:1.6.9-3.el10ap.src",
                  "product_id": "receptor-0:1.6.9-3.el10ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el9ap.src",
                "product": {
                  "name": "receptor-0:1.6.9-3.el9ap.src",
                  "product_id": "receptor-0:1.6.9-3.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el10ap.x86_64",
                "product": {
                  "name": "receptor-0:1.6.9-3.el10ap.x86_64",
                  "product_id": "receptor-0:1.6.9-3.el10ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
                "product": {
                  "name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
                  "product_id": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
                "product": {
                  "name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
                  "product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el9ap.x86_64",
                "product": {
                  "name": "receptor-0:1.6.9-3.el9ap.x86_64",
                  "product_id": "receptor-0:1.6.9-3.el9ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
                "product": {
                  "name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
                  "product_id": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
                "product": {
                  "name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
                  "product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el10ap.aarch64",
                "product": {
                  "name": "receptor-0:1.6.9-3.el10ap.aarch64",
                  "product_id": "receptor-0:1.6.9-3.el10ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
                "product": {
                  "name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
                  "product_id": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
                "product": {
                  "name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
                  "product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-0:1.6.9-3.el9ap.aarch64",
                "product": {
                  "name": "receptor-0:1.6.9-3.el9ap.aarch64",
                  "product_id": "receptor-0:1.6.9-3.el9ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
                "product": {
                  "name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
                  "product_id": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
                "product": {
                  "name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
                  "product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "receptorctl-0:1.6.9-3.el10ap.noarch",
                "product": {
                  "name": "receptorctl-0:1.6.9-3.el10ap.noarch",
                  "product_id": "receptorctl-0:1.6.9-3.el10ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptorctl@1.6.9-3.el10ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "receptorctl-0:1.6.9-3.el9ap.noarch",
                "product": {
                  "name": "receptorctl-0:1.6.9-3.el9ap.noarch",
                  "product_id": "receptorctl-0:1.6.9-3.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/receptorctl@1.6.9-3.el9ap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64"
        },
        "product_reference": "receptor-0:1.6.9-3.el10ap.aarch64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src"
        },
        "product_reference": "receptor-0:1.6.9-3.el10ap.src",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64"
        },
        "product_reference": "receptor-0:1.6.9-3.el10ap.x86_64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64"
        },
        "product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64"
        },
        "product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64"
        },
        "product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64"
        },
        "product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptorctl-0:1.6.9-3.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10",
          "product_id": "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch"
        },
        "product_reference": "receptorctl-0:1.6.9-3.el10ap.noarch",
        "relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src"
        },
        "product_reference": "receptor-0:1.6.9-3.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptorctl-0:1.6.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch"
        },
        "product_reference": "receptorctl-0:1.6.9-3.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7-Inside-1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64"
        },
        "product_reference": "receptor-0:1.6.9-3.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src"
        },
        "product_reference": "receptor-0:1.6.9-3.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
        },
        "product_reference": "receptor-0:1.6.9-3.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64"
        },
        "product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64"
        },
        "product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64"
        },
        "product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64"
        },
        "product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "receptorctl-0:1.6.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
        },
        "product_reference": "receptorctl-0:1.6.9-3.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-78667",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:51.418048+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548334"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
        ],
        "known_not_affected": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548334",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847309",
          "url": "https://go.dev/cl/847309"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81858",
          "url": "https://go.dev/issue/81858"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6609",
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "release_date": "2026-10-08T22:53:59.148000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T19:41:33+00:00",
          "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92622"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
        ],
        "known_not_affected": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T19:41:33+00:00",
          "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92622"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-97031",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:59.284728+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
          "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
        ],
        "known_not_affected": [
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
          "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
          "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847312",
          "url": "https://go.dev/cl/847312"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81855",
          "url": "https://go.dev/issue/81855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6607",
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "release_date": "2026-10-08T22:53:58.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T19:41:33+00:00",
          "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92622"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.src",
            "10Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
            "10Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
            "10Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el10ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7-Inside-1.5:receptorctl-0:1.6.9-3.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.7:receptor-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.7:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.7:receptorctl-0:1.6.9-3.el9ap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
    }
  ]
}

CVE-2026-78667 (GCVE-0-2026-78667)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:12

Title

Lack of limit on size of parsed Range headers in net/http

Summary

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:12 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847309
https://go.dev/issue/81858
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6609

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:12:49.383383Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:12:53.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "parseRange"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.148Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847309"
        },
        {
          "url": "https://go.dev/issue/81858"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "title": "Lack of limit on size of parsed Range headers in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78667",
    "datePublished": "2026-10-08T22:53:59.148Z",
    "dateReserved": "2026-08-24T23:36:15.738Z",
    "dateUpdated": "2026-10-09T16:12:53.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-78669 (GCVE-0-2026-78669)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:32

Title

Excessive CPU consumption from repeated initial window changes in net/http

Summary

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:32 UTC

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

6 references

URL	Tags
https://go.dev/cl/847186
https://go.dev/cl/847308
https://go.dev/issue/81742
https://groups.google.com/g/golang-announce/c/U2f…
https://groups.google.com/g/golang-announce/c/ZPw…
https://pkg.go.dev/vuln/GO-2026-6611

Impacted products

3 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver)
Go standard library	net/http/internal/http2	Affected: 1.27.0-0 , < 1.27.2 (semver)
golang.org/x/net	golang.org/x/net/http2	Affected: 0 , < 0.60.0 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:32:53.872432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:32:57.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "http2outflow.add"
            },
            {
              "name": "http2outflow.available"
            },
            {
              "name": "http2outflow.setConnFlow"
            },
            {
              "name": "http2outflow.take"
            },
            {
              "name": "http2Server.serveConn"
            },
            {
              "name": "http2serverConn.newStream"
            },
            {
              "name": "http2serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "http2serverConn.processWindowUpdate"
            },
            {
              "name": "http2serverConn.scheduleFrameWrite"
            },
            {
              "name": "http2ClientConn.addStreamLocked"
            },
            {
              "name": "http2Transport.newClientConn"
            },
            {
              "name": "http2clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "http2clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "http2clientConnReadLoop.streamByID"
            },
            {
              "name": "http2clientStream.awaitFlowControl"
            },
            {
              "name": "http2clientStream.cleanupWriteRequest"
            },
            {
              "name": "http2FrameWriteRequest.Consume"
            },
            {
              "name": "CanonicalHeaderKey"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Cookie.String"
            },
            {
              "name": "Cookie.Valid"
            },
            {
              "name": "CrossOriginProtection.AddInsecureBypassPattern"
            },
            {
              "name": "CrossOriginProtection.AddTrustedOrigin"
            },
            {
              "name": "CrossOriginProtection.Check"
            },
            {
              "name": "Dir.Open"
            },
            {
              "name": "Error"
            },
            {
              "name": "Get"
            },
            {
              "name": "Handle"
            },
            {
              "name": "HandleFunc"
            },
            {
              "name": "HandlerFunc.ServeHTTP"
            },
            {
              "name": "Head"
            },
            {
              "name": "Header.Add"
            },
            {
              "name": "Header.Del"
            },
            {
              "name": "Header.Get"
            },
            {
              "name": "Header.Set"
            },
            {
              "name": "Header.Values"
            },
            {
              "name": "Header.Write"
            },
            {
              "name": "Header.WriteSubset"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "NewRequest"
            },
            {
              "name": "NewRequestWithContext"
            },
            {
              "name": "NotFound"
            },
            {
              "name": "ParseCookie"
            },
            {
              "name": "ParseSetCookie"
            },
            {
              "name": "ParseTime"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "ProxyFromEnvironment"
            },
            {
              "name": "ReadRequest"
            },
            {
              "name": "ReadResponse"
            },
            {
              "name": "Redirect"
            },
            {
              "name": "Request.AddCookie"
            },
            {
              "name": "Request.BasicAuth"
            },
            {
              "name": "Request.Cookie"
            },
            {
              "name": "Request.Cookies"
            },
            {
              "name": "Request.CookiesNamed"
            },
            {
              "name": "Request.FormFile"
            },
            {
              "name": "Request.FormValue"
            },
            {
              "name": "Request.MultipartReader"
            },
            {
              "name": "Request.ParseForm"
            },
            {
              "name": "Request.ParseMultipartForm"
            },
            {
              "name": "Request.PostFormValue"
            },
            {
              "name": "Request.Referer"
            },
            {
              "name": "Request.SetBasicAuth"
            },
            {
              "name": "Request.UserAgent"
            },
            {
              "name": "Request.Write"
            },
            {
              "name": "Request.WriteProxy"
            },
            {
              "name": "Response.Cookies"
            },
            {
              "name": "Response.Location"
            },
            {
              "name": "Response.Write"
            },
            {
              "name": "ResponseController.EnableFullDuplex"
            },
            {
              "name": "ResponseController.Flush"
            },
            {
              "name": "ResponseController.Hijack"
            },
            {
              "name": "ResponseController.SetReadDeadline"
            },
            {
              "name": "ResponseController.SetWriteDeadline"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "ServeMux.Handle"
            },
            {
              "name": "ServeMux.HandleFunc"
            },
            {
              "name": "ServeMux.ServeHTTP"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.Close"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            },
            {
              "name": "Server.SetKeepAlivesEnabled"
            },
            {
              "name": "Server.Shutdown"
            },
            {
              "name": "SetCookie"
            },
            {
              "name": "Transport.CancelRequest"
            },
            {
              "name": "Transport.Clone"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "body.Close"
            },
            {
              "name": "body.Read"
            },
            {
              "name": "bodyEOFSignal.Close"
            },
            {
              "name": "bodyEOFSignal.Read"
            },
            {
              "name": "bodyLocked.Read"
            },
            {
              "name": "bufioFlushWriter.Write"
            },
            {
              "name": "cancelTimerBody.Close"
            },
            {
              "name": "cancelTimerBody.Read"
            },
            {
              "name": "checkConnErrorWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "connReader.Read"
            },
            {
              "name": "connectMethodKey.String"
            },
            {
              "name": "expectContinueReader.Close"
            },
            {
              "name": "expectContinueReader.Read"
            },
            {
              "name": "extraHeader.Write"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            },
            {
              "name": "globalOptionsHandler.ServeHTTP"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Close"
            },
            {
              "name": "http2ClientConn.Ping"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Shutdown"
            },
            {
              "name": "http2ConnectionError.Error"
            },
            {
              "name": "http2ErrCode.String"
            },
            {
              "name": "http2FrameHeader.String"
            },
            {
              "name": "http2FrameType.String"
            },
            {
              "name": "http2FrameWriteRequest.String"
            },
            {
              "name": "http2Framer.ReadFrame"
            },
            {
              "name": "http2Framer.ReadFrameForHeader"
            },
            {
              "name": "http2Framer.ReadFrameHeader"
            },
            {
              "name": "http2Framer.WriteContinuation"
            },
            {
              "name": "http2Framer.WriteData"
            },
            {
              "name": "http2Framer.WriteDataPadded"
            },
            {
              "name": "http2Framer.WriteGoAway"
            },
            {
              "name": "http2Framer.WriteHeaders"
            },
            {
              "name": "http2Framer.WritePing"
            },
            {
              "name": "http2Framer.WritePriority"
            },
            {
              "name": "http2Framer.WritePushPromise"
            },
            {
              "name": "http2Framer.WriteRSTStream"
            },
            {
              "name": "http2Framer.WriteRawFrame"
            },
            {
              "name": "http2Framer.WriteSettings"
            },
            {
              "name": "http2Framer.WriteSettingsAck"
            },
            {
              "name": "http2Framer.WriteWindowUpdate"
            },
            {
              "name": "http2GoAwayError.Error"
            },
            {
              "name": "http2Server.ServeConn"
            },
            {
              "name": "http2Setting.String"
            },
            {
              "name": "http2SettingID.String"
            },
            {
              "name": "http2SettingsFrame.ForeachSetting"
            },
            {
              "name": "http2StreamError.Error"
            },
            {
              "name": "http2Transport.CloseIdleConnections"
            },
            {
              "name": "http2Transport.NewClientConn"
            },
            {
              "name": "http2Transport.RoundTrip"
            },
            {
              "name": "http2Transport.RoundTripOpt"
            },
            {
              "name": "http2bufferedWriter.Flush"
            },
            {
              "name": "http2bufferedWriter.Write"
            },
            {
              "name": "http2bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "http2chunkWriter.Write"
            },
            {
              "name": "http2clientConnPool.GetClientConn"
            },
            {
              "name": "http2connError.Error"
            },
            {
              "name": "http2dataBuffer.Read"
            },
            {
              "name": "http2duplicatePseudoHeaderError.Error"
            },
            {
              "name": "http2gzipReader.Close"
            },
            {
              "name": "http2gzipReader.Read"
            },
            {
              "name": "http2headerFieldNameError.Error"
            },
            {
              "name": "http2headerFieldValueError.Error"
            },
            {
              "name": "http2netHTTPClientConn.Close"
            },
            {
              "name": "http2netHTTPClientConn.RoundTrip"
            },
            {
              "name": "http2noDialClientConnPool.GetClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "http2pipe.Read"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "http2pseudoHeaderError.Error"
            },
            {
              "name": "http2randomWriteScheduler.Pop"
            },
            {
              "name": "http2requestBody.Close"
            },
            {
              "name": "http2requestBody.Read"
            },
            {
              "name": "http2responseWriter.Flush"
            },
            {
              "name": "http2responseWriter.FlushError"
            },
            {
              "name": "http2responseWriter.Push"
            },
            {
              "name": "http2responseWriter.SetReadDeadline"
            },
            {
              "name": "http2responseWriter.SetWriteDeadline"
            },
            {
              "name": "http2responseWriter.Write"
            },
            {
              "name": "http2responseWriter.WriteHeader"
            },
            {
              "name": "http2responseWriter.WriteString"
            },
            {
              "name": "http2roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "http2roundRobinWriteScheduler.Pop"
            },
            {
              "name": "http2serverConn.CloseConn"
            },
            {
              "name": "http2serverConn.Flush"
            },
            {
              "name": "http2stickyErrWriter.Write"
            },
            {
              "name": "http2transportResponseBody.Close"
            },
            {
              "name": "http2transportResponseBody.Read"
            },
            {
              "name": "http2unencryptedTransport.RoundTrip"
            },
            {
              "name": "http2writeData.String"
            },
            {
              "name": "initALPNRequest.ServeHTTP"
            },
            {
              "name": "loggingConn.Close"
            },
            {
              "name": "loggingConn.Read"
            },
            {
              "name": "loggingConn.Write"
            },
            {
              "name": "maxBytesReader.Close"
            },
            {
              "name": "maxBytesReader.Read"
            },
            {
              "name": "onceCloseListener.Close"
            },
            {
              "name": "persistConn.Read"
            },
            {
              "name": "persistConnWriter.ReadFrom"
            },
            {
              "name": "persistConnWriter.Write"
            },
            {
              "name": "populateResponse.Write"
            },
            {
              "name": "populateResponse.WriteHeader"
            },
            {
              "name": "readTrackingBody.Close"
            },
            {
              "name": "readTrackingBody.Read"
            },
            {
              "name": "readWriteCloserBody.CloseWrite"
            },
            {
              "name": "readWriteCloserBody.Read"
            },
            {
              "name": "redirectHandler.ServeHTTP"
            },
            {
              "name": "response.Flush"
            },
            {
              "name": "response.FlushError"
            },
            {
              "name": "response.Hijack"
            },
            {
              "name": "response.ReadFrom"
            },
            {
              "name": "response.Write"
            },
            {
              "name": "response.WriteHeader"
            },
            {
              "name": "response.WriteString"
            },
            {
              "name": "serverHandler.ServeHTTP"
            },
            {
              "name": "socksDialer.DialWithConn"
            },
            {
              "name": "socksUsernamePassword.Authenticate"
            },
            {
              "name": "stringWriter.WriteString"
            },
            {
              "name": "timeoutHandler.ServeHTTP"
            },
            {
              "name": "timeoutWriter.Write"
            },
            {
              "name": "timeoutWriter.WriteHeader"
            },
            {
              "name": "transportReadFromServerError.Error"
            },
            {
              "name": "unencryptedHTTP2Request.ServeHTTP"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "NetHTTPClientConn.Close"
            },
            {
              "name": "NetHTTPClientConn.Ping"
            },
            {
              "name": "NetHTTPClientConn.RoundTrip"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.GracefulShutdown"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serve400Handler.ServeHTTP"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2",
          "product": "golang.org/x/net/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "ConfigureServer"
            },
            {
              "name": "ConfigureTransport"
            },
            {
              "name": "ConfigureTransports"
            },
            {
              "name": "ConnectionError.Error"
            },
            {
              "name": "ErrCode.String"
            },
            {
              "name": "FrameHeader.String"
            },
            {
              "name": "FrameType.String"
            },
            {
              "name": "FrameWriteRequest.String"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "GoAwayError.Error"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "Setting.String"
            },
            {
              "name": "SettingID.String"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "StreamError.Error"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "connError.Error"
            },
            {
              "name": "dataBuffer.Read"
            },
            {
              "name": "duplicatePseudoHeaderError.Error"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "headerFieldNameError.Error"
            },
            {
              "name": "headerFieldValueError.Error"
            },
            {
              "name": "netHTTPClientConn.Close"
            },
            {
              "name": "netHTTPClientConn.RoundTrip"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "pipe.Read"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "pseudoHeaderError.Error"
            },
            {
              "name": "randomWriteScheduler.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "requestBody.Read"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.SetReadDeadline"
            },
            {
              "name": "responseWriter.SetWriteDeadline"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serverConn.CloseConn"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            },
            {
              "name": "unencryptedTransport.RoundTrip"
            },
            {
              "name": "writeData.String"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.60.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.530Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847186"
        },
        {
          "url": "https://go.dev/cl/847308"
        },
        {
          "url": "https://go.dev/issue/81742"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "title": "Excessive CPU consumption from repeated initial window changes in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78669",
    "datePublished": "2026-10-08T22:53:59.530Z",
    "dateReserved": "2026-08-24T23:36:15.739Z",
    "dateUpdated": "2026-10-09T16:32:57.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97031 (GCVE-0-2026-97031)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 15:59

Title

Reject malformed ECH outer extension references in crypto/tls

Summary

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 15:59 UTC

CWE

CWE-405 - Asymmetric Resource Consumption
CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847312
https://go.dev/issue/81855
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6607

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-97031",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T15:59:09.530145Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T15:59:17.238Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "decodeInnerClientHello"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:58.775Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847312"
        },
        {
          "url": "https://go.dev/issue/81855"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "title": "Reject malformed ECH outer extension references in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-97031",
    "datePublished": "2026-10-08T22:53:58.775Z",
    "dateReserved": "2026-09-23T23:03:36.988Z",
    "dateUpdated": "2026-10-09T15:59:17.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:92622

CVE-2026-78667 (GCVE-0-2026-78667)

CVE-2026-78669 (GCVE-0-2026-78669)

CVE-2026-97031 (GCVE-0-2026-97031)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour