CVE-2026-13002

Katalog CVE

CVSS 4.4 · Medium EPSS 0,15%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada redhat openshift container platform, redhat enterprise linux. Skor CVSS 3.1 4.4 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

4.4 (Medium), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-13002 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2486360 issue tracking · advisory vendor