Faible
3.3
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or...
CVE-2026-114236
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| Red Hat | Confidential Compute Attestation | — | — |
| Red Hat | DPU kit for NVIDIA | — | — |
| Red Hat | Exploit Intelligence | — | — |
| Red Hat | Multicluster Engine for Kubernetes | — | — |
| Red Hat | NVIDIA JetPack 6 for RHEL | — | — |
| Red Hat | OpenShift Lightspeed | — | — |
| Red Hat | OpenShift Source-to-Image (S2I) | — | — |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — |
| Red Hat | Red Hat Build of Podman Desktop | — | — |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Developer Hub | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Hardened Images | — | — |
Description d'origine La description telle que publiée par la source (souvent en anglais).
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
Source: GitHub Security Advisories (Global) NVD GitHub Advisory
Références
- web nvd.nist.gov
- web secalert@redhat.com
- web secalert@redhat.com
- web github.com