CVE-2026-39820
EUVD-2026-2842307.05.2026, 20:16
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 𝑥 < 1.25.10 |
| golang | go | 1.26.0 ≤ 𝑥 < 1.26.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:2.5.10-7.el8ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:2.6.17-2.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:2.6.17-2.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:1.26.3-4.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:10.2.6-28.el10_2.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:0.152.1-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:52.1-1.el10_2.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:165.1-3.el10_2.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:1.26.5-1.el10_0 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.21.0-3.el10_0.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:134.1-12.el10_0 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:10.2.6-26.el10_0 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:0.152.1-2.el10_0 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 8100020260518131104.a3795dee ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:9.2.10-33.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:101.5-2.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:75-10.el8_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:75-10.el8_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.26.3-1.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:10.2.6-23.el9_8.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:0.152.1-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:165.1-4.el9_8.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:52.1-1.el9_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:1.26.5-1.el9_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:76.1-9.el9_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:1.26.5-1.el9_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:101.3-4.el9_4.6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:0.152.1-2.el9_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:1.26.5-1.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:10.2.6-22.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:132.2-12.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:2.21.0-7.el9_6.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:0.152.1-2.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 0:1.25.5-34.rhaos4.12.git6120b13.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 0:1.26.5-32.rhaos4.13.git1088e36.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:1.29.13-12.rhaos4.16.git979a5e6.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:1.30.14-11.rhaos4.17.git1e2a16d.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:1.31.13-11.rhaos4.18.git817a650.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:1.32.13-9.rhaos4.19.git2100f27.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 0:3.31.0-5.rhaos4.19.el9 ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 10 | 0:1.1.4-1.el10em ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 9 | 0:1.1.4-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | 1786613805 ≤ 𝑥 < * | ADP |
| Red Hat | Logging for Red Hat OpenShift 6 | 1785419067 ≤ 𝑥 < * | ADP |
| Red Hat | Logging for Red Hat OpenShift 6.2 | 1784748010 ≤ 𝑥 < * | ADP |
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 | 1782405469 ≤ 𝑥 < * | ADP |
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 | 1786645248 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.11 | 1786912006 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785177357 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.4 | 1786946116 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.5 | 1788860461 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.6 | 1784058822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1783357116 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1783357140 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.10 | 1783447707 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.9 | 1782767215 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.25.11-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.26.4-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit 1.8 | 1783953372 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 | 1785171639 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 | 1784211378 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783544461 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787102977 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786611759 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787562200 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 1786752886 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 1787002807 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 1786788280 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 1787549445 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 1786754308 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1786489910 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1786494900 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1786496647 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1786573075 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.30 | 1787756267 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.30 | 1787756799 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift distributed tracing 3.10.2 | 1785704547 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782222217 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782223341 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782296193 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1782222607 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222163 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782223138 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222394 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1782222451 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782226178 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782224487 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782303211 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1782224541 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782223045 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782222366 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782310747 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.3 | 1782222038 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 0.12 | 1785202723 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 0.13 | 1785203036 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 0.3 | 1785203474 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 0.7 | 1785203508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 0.8 | 1785203079 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Workload Availability 5.7 | 1785202847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.10 | 1783750447 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1783751865 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1784353904 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.15 | 1784351966 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1783955846 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1784125838 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.3 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-1.13 |
| ||||||||||||||
| golang-1.18 |
| ||||||||||||||
| golang-1.23 |
| ||||||||||||||
| golang-1.24 |
| ||||||||||||||
| golang-1.25 |
| ||||||||||||||
| golang |
| ||||||||||||||
| golang-1.10 |
| ||||||||||||||
| golang-1.14 |
| ||||||||||||||
| golang-1.16 |
| ||||||||||||||
| golang-1.17 |
| ||||||||||||||
| golang-1.20 |
| ||||||||||||||
| golang-1.21 |
| ||||||||||||||
| golang-1.22 |
| ||||||||||||||
| golang-1.6 |
| ||||||||||||||
| golang-1.8 |
| ||||||||||||||
| golang-1.9 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| go-toolset |
| ||||||||
| golang |
| ||||||||
| golang-bin |
| ||||||||
| golang-docs |
| ||||||||
| golang-misc |
| ||||||||
| golang-race |
| ||||||||
| golang-src |
| ||||||||
| golang-tests |
| ||||||||
| grafana |
| ||||||||
| grafana-selinux |
| ||||||||
| image-builder |
| ||||||||
| opentelemetry-collector |
| ||||||||
| osbuild-composer |
| ||||||||
| osbuild-composer-core |
| ||||||||
| osbuild-composer-dnf-json |
| ||||||||
| osbuild-composer-worker |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| amazon-cloudwatch-agent |
| ||||
| amazon-ecr-credential-helper |
| ||||
| captree |
| ||||
| captree-debuginfo |
| ||||
| cni-plugins |
| ||||
| cni-plugins-debuginfo |
| ||||
| cni-plugins-debugsource |
| ||||
| compat-golang-github-cpuguy83-md2man-2-devel |
| ||||
| containerd |
| ||||
| containerd-debuginfo |
| ||||
| containerd-debugsource |
| ||||
| containerd-stress |
| ||||
| containerd-stress-debuginfo |
| ||||
| credentials-fetcher |
| ||||
| cri-tools |
| ||||
| cri-tools-debuginfo |
| ||||
| docker |
| ||||
| docker-debuginfo |
| ||||
| docker-debugsource |
| ||||
| ecs-init |
| ||||
| git-lfs |
| ||||
| git-lfs-debuginfo |
| ||||
| git-lfs-debugsource |
| ||||
| golang |
| ||||
| golang-bin |
| ||||
| golang-docs |
| ||||
| golang-github-burntsushi-toml |
| ||||
| golang-github-burntsushi-toml-debuginfo |
| ||||
| golang-github-burntsushi-toml-debugsource |
| ||||
| golang-github-burntsushi-toml-devel |
| ||||
| golang-github-burntsushi-toml-test |
| ||||
| golang-github-burntsushi-toml-test-debuginfo |
| ||||
| golang-github-burntsushi-toml-test-debugsource |
| ||||
| golang-github-burntsushi-toml-test-devel |
| ||||
| golang-github-cpuguy83-md2man |
| ||||
| golang-github-cpuguy83-md2man-debuginfo |
| ||||
| golang-github-cpuguy83-md2man-debugsource |
| ||||
| golang-github-cpuguy83-md2man-devel |
| ||||
| golang-misc |
| ||||
| golang-shared |
| ||||
| golang-src |
| ||||
| golang-tests |
| ||||
| golist |
| ||||
| golist-debuginfo |
| ||||
| golist-debugsource |
| ||||
| libcap |
| ||||
| libcap-debuginfo |
| ||||
| libcap-debugsource |
| ||||
| libcap-devel |
| ||||
| libcap-static |
| ||||
| nerdctl |
| ||||
| nerdctl-debuginfo |
| ||||
| oci-add-hooks |
| ||||
| oci-add-hooks-debuginfo |
| ||||
| oci-add-hooks-debugsource |
| ||||
| rclone |
| ||||
| rclone-debuginfo |
| ||||
| rclone-debugsource |
| ||||
| runc |
| ||||
| runc-debuginfo |
| ||||
| runc-debugsource |
| ||||
| runfinch-finch |
| ||||
| soci-snapshotter |
| ||||
| yq |
| ||||
| yq-debuginfo |
| ||||
| yq-debugsource |
|
Common Weakness Enumeration
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
- CWE-606 - Unchecked Input for Loop ConditionThe product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
References