RHSA-2026:95652
Vulnerability from csaf_redhat - Published: 2026-11-05 19:43 - Updated: 2026-11-06 07:28Summary
Red Hat Security Advisory: Satellite 6.19 security update
Severity
Critical
Notes
Topic: A security update for Red Hat Satellite 6.19 is now available.
Red Hat Product Security has rated this update as having a security impact
of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE links in the References section.
Details: This advisory provides security fixes for affected packages used by Red Hat
Satellite. The updates address the vulnerabilities described below.
Security Fix(es):
* openvox-agent: Integer overflow when compiling a specially crafted
regular expression (CVE-2026-110264).
* openvox-agent: Integer overflow when compiling a specially crafted CI/CD
regular expression (CVE-2026-97229).
* openvox-agent: Integer overflow when compiling a specially crafted
regular expression (CVE-2026-93577).
* openvox-agent: Double free when parsing a specially crafted regular
expression (CVE-2026-89078).
* openvox-server: Authenticated remote code execution via report event
deserialization (CVE-2026-115731).
* openvox-server: Certificate name authorization bypass via flawed hostname
ACL matching (CVE-2026-115732).
* openvox-server: Denial of Service via unbounded memory allocation in
asynchronous parser (CVE-2026-104895).
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory corruption, potentially resulting in arbitrary code execution.
9.8 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.
9.8 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-89078
Known not affected
4 products, the same list as for
CVE-2026-89078
Threats
Impact
Critical
A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.
9.8 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-89078
Known not affected
4 products, the same list as for
CVE-2026-89078
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Critical
A flaw was found in jackson-dataformat-smile. A remote attacker can cause a Denial of Service (DoS) by submitting specially crafted binary data to an asynchronous parsing endpoint. The parser fails to validate length prefixes, allowing untrusted input to trigger integer overflows or excessive memory allocations without upper bounds. Successful exploitation results in an application or processing thread crash.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64 | — |
Threats
Impact
Important
A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow of internal IDs can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.
9.8 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-89078
Known not affected
4 products, the same list as for
CVE-2026-89078
Threats
Impact
Critical
Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT request. Where the certificate authority autosigns requests without strong verification, an unauthenticated network attacker can obtain such a certificate.
9.9 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-104895
Known not affected
4 products, the same list as for
CVE-2026-104895
Threats
Impact
Critical
Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.
9.9 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-104895
Known not affected
4 products, the same list as for
CVE-2026-104895
Threats
Impact
Critical
References
52 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A security update for Red Hat Satellite 6.19 is now available.\n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This advisory provides security fixes for affected packages used by Red Hat\nSatellite. The updates address the vulnerabilities described below.\n\nSecurity Fix(es):\n\n* openvox-agent: Integer overflow when compiling a specially crafted\nregular expression (CVE-2026-110264).\n* openvox-agent: Integer overflow when compiling a specially crafted CI/CD\nregular expression (CVE-2026-97229).\n* openvox-agent: Integer overflow when compiling a specially crafted\nregular expression (CVE-2026-93577).\n* openvox-agent: Double free when parsing a specially crafted regular\nexpression (CVE-2026-89078).\n* openvox-server: Authenticated remote code execution via report event\ndeserialization (CVE-2026-115731).\n* openvox-server: Certificate name authorization bypass via flawed hostname\nACL matching (CVE-2026-115732).\n\n* openvox-server: Denial of Service via unbounded memory allocation in\nasynchronous parser (CVE-2026-104895).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:95652",
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95652.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.19 security update",
"tracking": {
"current_release_date": "2026-11-06T07:28:54+00:00",
"generator": {
"date": "2026-11-06T07:28:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:95652",
"initial_release_date": "2026-11-05T19:43:49+00:00",
"revision_history": [
{
"date": "2026-11-05T19:43:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-05T19:43:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-06T07:28:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "openvox-agent-0:8.32.0-1.el9sat.src",
"product": {
"name": "openvox-agent-0:8.32.0-1.el9sat.src",
"product_id": "openvox-agent-0:8.32.0-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-agent@8.32.0-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvox-server-0:8.18.0-1.el9sat.src",
"product": {
"name": "openvox-server-0:8.18.0-1.el9sat.src",
"product_id": "openvox-server-0:8.18.0-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.18.0-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openvox-agent-0:8.32.0-1.el9sat.x86_64",
"product": {
"name": "openvox-agent-0:8.32.0-1.el9sat.x86_64",
"product_id": "openvox-agent-0:8.32.0-1.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-agent@8.32.0-1.el9sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvox-server-0:8.18.0-1.el9sat.noarch",
"product": {
"name": "openvox-server-0:8.18.0-1.el9sat.noarch",
"product_id": "openvox-server-0:8.18.0-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.18.0-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.32.0-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src"
},
"product_reference": "openvox-agent-0:8.32.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.32.0-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64"
},
"product_reference": "openvox-agent-0:8.32.0-1.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.18.0-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.18.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.18.0-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.18.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.32.0-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src"
},
"product_reference": "openvox-agent-0:8.32.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.32.0-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
},
"product_reference": "openvox-agent-0:8.32.0-1.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.18.0-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.18.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.18.0-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.18.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-89078",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"discovery_date": "2026-09-23T23:20:51.276943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539836"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory corruption, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: double free issue in regular expression parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89078"
},
{
"category": "external",
"summary": "RHBZ#2539836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539836"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89078"
},
{
"category": "external",
"summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/",
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
},
{
"category": "external",
"summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/628577",
"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/628577"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/4019059",
"url": "https://hackerone.com/reports/4019059"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
"url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
}
],
"release_date": "2026-09-23T23:05:20.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "ruby: double free issue in regular expression parser"
},
{
"cve": "CVE-2026-93577",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-09-23T23:21:10.955642+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539842"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: integer overflow issue in regular expression compiler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93577"
},
{
"category": "external",
"summary": "RHBZ#2539842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93577"
},
{
"category": "external",
"summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/",
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
},
{
"category": "external",
"summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/629758",
"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/629758"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3995696",
"url": "https://hackerone.com/reports/3995696"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
"url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
}
],
"release_date": "2026-09-23T23:04:45.296000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "ruby: integer overflow issue in regular expression compiler"
},
{
"cve": "CVE-2026-97229",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-10-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2550153"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: integer overflow issue in CI/CD regular expression compiler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97229"
},
{
"category": "external",
"summary": "RHBZ#2550153",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550153"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229"
},
{
"category": "external",
"summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/",
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"
},
{
"category": "external",
"summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/630686",
"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/630686"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/4055749",
"url": "https://hackerone.com/reports/4055749"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/4058589",
"url": "https://hackerone.com/reports/4058589"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
"url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2026-10-13T01:05:46.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-10-29T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "ruby: integer overflow issue in CI/CD regular expression compiler"
},
{
"cve": "CVE-2026-104895",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-28T00:11:15.957953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562517"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-dataformat-smile. A remote attacker can cause a Denial of Service (DoS) by submitting specially crafted binary data to an asynchronous parsing endpoint. The parser fails to validate length prefixes, allowing untrusted input to trigger integer overflows or excessive memory allocations without upper bounds. Successful exploitation results in an application or processing thread crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.dataformat/jackson-dataformat-smile: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in asynchronous parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because unauthenticated remote attackers can trigger an application crash or service denial using minimal network traffic, though data confidentiality and integrity are not compromised. Exploitation is constrained to endpoints explicitly configured to process untrusted binary input via reactive or asynchronous Smile parsers. Typical deployments using standard blocking parsers or conventional JSON serialization are not vulnerable to this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104895"
},
{
"category": "external",
"summary": "RHBZ#2562517",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562517"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104895"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-h3c2-2m49-r49w",
"url": "https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-h3c2-2m49-r49w"
}
],
"release_date": "2026-10-28T00:01:44.496000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.dataformat/jackson-dataformat-smile: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in asynchronous parser"
},
{
"cve": "CVE-2026-110264",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-10-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2558632"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow of internal IDs can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: integer overflow issue in regular expression compiler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110264"
},
{
"category": "external",
"summary": "RHBZ#2558632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558632"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264"
},
{
"category": "external",
"summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/",
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"
},
{
"category": "external",
"summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/633633",
"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/633633"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/4093475",
"url": "https://hackerone.com/reports/4093475"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
"url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
}
],
"release_date": "2026-10-22T00:33:48.179000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "ruby: integer overflow issue in regular expression compiler"
},
{
"acknowledgments": [
{
"names": [
"Alain"
],
"organization": "Neodyme",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2026-115731",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-11-03T21:15:54.948758+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2566451"
}
],
"notes": [
{
"category": "description",
"text": "Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT request. Where the certificate authority autosigns requests without strong verification, an unauthenticated network attacker can obtain such a certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-115731"
},
{
"category": "external",
"summary": "RHBZ#2566451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-115731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-115731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-115731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115731"
},
{
"category": "external",
"summary": "https://github.com/OpenVoxProject/openvox/security/advisories/GHSA-ffr6-rwpm-p5wq",
"url": "https://github.com/OpenVoxProject/openvox/security/advisories/GHSA-ffr6-rwpm-p5wq"
},
{
"category": "external",
"summary": "https://portal.perforce.com/s/cve/a91Qi000003IaHpIAK/report-deserialization-code-execution",
"url": "https://portal.perforce.com/s/cve/a91Qi000003IaHpIAK/report-deserialization-code-execution"
},
{
"category": "external",
"summary": "https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/",
"url": "https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/11/03/14",
"url": "https://www.openwall.com/lists/oss-security/2026/11/03/14"
}
],
"release_date": "2026-11-03T20:40:10.100000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "Until patched, avoid autosigning certificate requests without strong verification so untrusted clients cannot obtain a CA-signed agent certificate.\n\n--- CME Mitigation Guidance (2026-11-04) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce safe deserialization allowlists for report event types in FromDataConverter to prevent dynamic class_eval execution: upgrade to openvox-server 9.2.0 and 8.18.0, Puppet Core agent 9.1.3 and 8.22.2 (or the fixed Openvox Server/Puppetserver builds), which restricts deserialization of report events to safe expected types to block untrusted __ptype instantiation and dynamic evaluation, closing crafted JSON report containing malicious serialized rich-data event types submitted via HTTP PUT. Until patched, this is a concern on Puppet Server and OpenVox Server instances processing agent reports, so avoid autosigning certificate requests without strong verification and restrict network access to the PUT /puppet/v3/report endpoint. As a compensating measure, enforce strict allowlist validation over report payload schemas and event structures before deserialization, deploy EDR to detect anomalous child processes and post-exploitation activity spawned by the puppetserver service user, configure auditd to log unauthorized system calls and command executions initiated by the puppetserver daemon, and use Falco or eBPF runtime security to detect unexpected shell invocations or sensitive credential reads by puppetserver. These controls limit blast radius and contain exploitation, but they do not fix the underlying untrusted deserialization defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1302 Deserialization Allowlist (Safe Loading) (high)",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization"
},
{
"acknowledgments": [
{
"names": [
"Alain"
],
"organization": "Neodyme",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2026-115732",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2026-11-03T20:44:45.606619+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2566291"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "trapperkeeper-authorization: puppetserver: openvox-server: openvoxdb: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-115732"
},
{
"category": "external",
"summary": "RHBZ#2566291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-115732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-115732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-115732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115732"
},
{
"category": "external",
"summary": "https://github.com/OpenVoxProject/trapperkeeper-authorization/security/advisories/GHSA-q4hm-33rc-572g",
"url": "https://github.com/OpenVoxProject/trapperkeeper-authorization/security/advisories/GHSA-q4hm-33rc-572g"
},
{
"category": "external",
"summary": "https://portal.perforce.com/s/cve/a91Qi000003IaJRIA0/certificate-name-authorization-bypass",
"url": "https://portal.perforce.com/s/cve/a91Qi000003IaJRIA0/certificate-name-authorization-bypass"
},
{
"category": "external",
"summary": "https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/",
"url": "https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/11/03/14",
"url": "https://www.openwall.com/lists/oss-security/2026/11/03/14"
}
],
"release_date": "2026-11-03T20:38:24.169000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-05T19:43:49+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:95652"
},
{
"category": "workaround",
"details": "Until patched, avoid autosigning certificate requests without strong verification, and do not approve CSRs for names that are suffixes/prefixes of existing authorized certnames.\n\n--- CME Mitigation Guidance (2026-11-04) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce exact domain segment length matching and full domain equality for certificate hostname ACL checks in trapperkeeper-authorization: upgrade to openvox-server and openvoxdb 9.2.0, 8.18.0 (or the fixed Puppetserver/Openvox Server builds), which require domain segment counts to match for non-wildcard rules or validate full domain equality during ACL evaluation, closing all 2 injection vectors (subdomain certificate acquisition via autosigning, prefix or suffix certificate signing via CA approval). Until patched, this is a concern on Puppet Server, OpenVox Server, and OpenVoxDB deployments, so Avoid autosigning certificate requests without strict verification, reject CSR approvals for names that extend or shorten authorized certnames, and restrict network access to server endpoints. As a compensating measure, Deploy EDR agents to detect anomalous post-exploitation activity and unauthorized command execution on nodes targeted through catalog impersonation, Configure Falco or eBPF runtime security to detect anomalous process executions and unexpected shells spawned following catalog-driven execution, and Integrate application admin event logging with SIEM to detect unauthorized CA administrative operations or node catalog downloads with mismatched certnames. These controls limit blast radius and contain exploitation, but they do not fix the underlying flawed hostname ACL matching defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1001 EDR Agent (Endpoint Detection \u0026 Response) (medium)",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.18.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.32.0-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.18.0-1.el9sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "trapperkeeper-authorization: puppetserver: openvox-server: openvoxdb: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.