CVE-2026-33814
EUVD-2026-2842007.05.2026, 20:16
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 𝑥 < 1.25.10 |
| golang | go | 1.26.0 ≤ 𝑥 < 1.26.3 |
| golang | http2 | 𝑥 < 0.53.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cluster Observability Operator 1.5.0 | 1782840519 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839981 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839193 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782838753 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839279 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782840539 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782844225 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839658 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782838476 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.6 | 1784058822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.25.11-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.26.4-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783544461 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783457482 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783429345 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783946386 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932114 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782931768 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932104 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536000 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783535989 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536515 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932521 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018461 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018421 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537001 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537586 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932969 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933015 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933042 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537392 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933235 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933251 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537955 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933417 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537742 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933602 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783019377 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934054 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934036 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934284 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 | 1785704547 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782222217 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782223341 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782296193 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782222607 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222163 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782223138 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222394 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222451 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782226178 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782224487 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782303211 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782224541 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782223045 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782222366 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782310747 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782222038 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-golang-x-net |
| ||||||||||||||
| google-guest-agent |
| ||||||||||||||
| containerd |
| ||||||||||||||
| adsys |
| ||||||||||||||
| containerd-app |
| ||||||||||||||
| containerd-stable |
| ||||||||||||||
| golang-golang-x-net-dev |
| ||||||||||||||
| juju-core |
| ||||||||||||||
| lxd |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apptainer |
| ||||||||||||||||||||||||||||||||
| apptainer-sle15_6 |
| ||||||||||||||||||||||||||||||||
| aws-iam-authenticator |
| ||||||||||||||||||||||||||||||||
| azure-storage-azcopy |
| ||||||||||||||||||||||||||||||||
| containerd |
| ||||||||||||||||||||||||||||||||
| containerd-ctr |
| ||||||||||||||||||||||||||||||||
| containerd-devel |
| ||||||||||||||||||||||||||||||||
| docker-buildx |
| ||||||||||||||||||||||||||||||||
| google-cloud-sap-agent |
| ||||||||||||||||||||||||||||||||
| google-guest-agent |
| ||||||||||||||||||||||||||||||||
| google-osconfig-agent |
| ||||||||||||||||||||||||||||||||
| helm |
| ||||||||||||||||||||||||||||||||
| helm-bash-completion |
| ||||||||||||||||||||||||||||||||
| helm-zsh-completion |
| ||||||||||||||||||||||||||||||||
| ignition |
| ||||||||||||||||||||||||||||||||
| ignition-dracut-grub2 |
| ||||||||||||||||||||||||||||||||
| kubevirt-manifests |
| ||||||||||||||||||||||||||||||||
| kubevirt-virtctl |
| ||||||||||||||||||||||||||||||||
| terraform-provider-aws |
| ||||||||||||||||||||||||||||||||
| terraform-provider-azurerm |
| ||||||||||||||||||||||||||||||||
| terraform-provider-external |
| ||||||||||||||||||||||||||||||||
| terraform-provider-google |
| ||||||||||||||||||||||||||||||||
| terraform-provider-helm |
| ||||||||||||||||||||||||||||||||
| terraform-provider-kubernetes |
| ||||||||||||||||||||||||||||||||
| terraform-provider-local |
| ||||||||||||||||||||||||||||||||
| terraform-provider-null |
| ||||||||||||||||||||||||||||||||
| terraform-provider-random |
| ||||||||||||||||||||||||||||||||
| terraform-provider-susepubliccloud |
| ||||||||||||||||||||||||||||||||
| terraform-provider-tls |
| ||||||||||||||||||||||||||||||||
| warewulf4 |
| ||||||||||||||||||||||||||||||||
| warewulf4-dracut |
| ||||||||||||||||||||||||||||||||
| warewulf4-man |
| ||||||||||||||||||||||||||||||||
| warewulf4-overlay |
| ||||||||||||||||||||||||||||||||
| warewulf4-reference-doc |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| amazon-cloudwatch-agent |
| ||||
| amazon-ecr-credential-helper |
| ||||
| amazon-ssm-agent |
| ||||
| captree |
| ||||
| captree-debuginfo |
| ||||
| cni-plugins |
| ||||
| cni-plugins-debuginfo |
| ||||
| cni-plugins-debugsource |
| ||||
| compat-golang-github-cpuguy83-md2man-2-devel |
| ||||
| containerd |
| ||||
| containerd-debuginfo |
| ||||
| containerd-debugsource |
| ||||
| containerd-stress |
| ||||
| containerd-stress-debuginfo |
| ||||
| credentials-fetcher |
| ||||
| cri-tools |
| ||||
| cri-tools-debuginfo |
| ||||
| docker |
| ||||
| docker-debuginfo |
| ||||
| docker-debugsource |
| ||||
| ecs-init |
| ||||
| git-lfs |
| ||||
| git-lfs-debuginfo |
| ||||
| git-lfs-debugsource |
| ||||
| golang |
| ||||
| golang-bin |
| ||||
| golang-docs |
| ||||
| golang-github-burntsushi-toml |
| ||||
| golang-github-burntsushi-toml-debuginfo |
| ||||
| golang-github-burntsushi-toml-debugsource |
| ||||
| golang-github-burntsushi-toml-devel |
| ||||
| golang-github-burntsushi-toml-test |
| ||||
| golang-github-burntsushi-toml-test-debuginfo |
| ||||
| golang-github-burntsushi-toml-test-debugsource |
| ||||
| golang-github-burntsushi-toml-test-devel |
| ||||
| golang-github-cpuguy83-md2man |
| ||||
| golang-github-cpuguy83-md2man-debuginfo |
| ||||
| golang-github-cpuguy83-md2man-debugsource |
| ||||
| golang-github-cpuguy83-md2man-devel |
| ||||
| golang-misc |
| ||||
| golang-shared |
| ||||
| golang-src |
| ||||
| golang-tests |
| ||||
| golist |
| ||||
| golist-debuginfo |
| ||||
| golist-debugsource |
| ||||
| libcap |
| ||||
| libcap-debuginfo |
| ||||
| libcap-debugsource |
| ||||
| libcap-devel |
| ||||
| libcap-static |
| ||||
| nerdctl |
| ||||
| nerdctl-debuginfo |
| ||||
| oci-add-hooks |
| ||||
| oci-add-hooks-debuginfo |
| ||||
| oci-add-hooks-debugsource |
| ||||
| rclone |
| ||||
| rclone-debuginfo |
| ||||
| rclone-debugsource |
| ||||
| runc |
| ||||
| runc-debuginfo |
| ||||
| runc-debugsource |
| ||||
| runfinch-finch |
| ||||
| soci-snapshotter |
| ||||
| yq |
| ||||
| yq-debuginfo |
| ||||
| yq-debugsource |
|
Azure Linux Releases
Azure Package | |||
|---|---|---|---|
| application-gateway-kubernetes-ingress |
| ||
| azurelinux-image-tools |
| ||
| cert-manager |
| ||
| containerd2 |
| ||
| containerized-data-importer |
| ||
| etcd |
| ||
| golang |
| ||
| ignition-flatcar |
| ||
| kata-containers |
| ||
| kata-containers-cc |
| ||
| kubevirt |
| ||
| packer |
|
Common Weakness Enumeration
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
- CWE-606 - Unchecked Input for Loop ConditionThe product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
References