CVE-2026-39829
EUVD-2026-3139622.05.2026, 04:16
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | crypto | 𝑥 < 0.52.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cryostat 4 on RHEL 9 | 4.2.0-19 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 2:1.43.1-3.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 7:5.8.2-4.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 8100020260701102925.afee755d ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 8080020260721142025.63b34585 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 8080020260721142025.63b34585 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 2:1.43.1-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 6:5.8.2-4.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.0 for RHEL 9 | 0:1.0.3-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 10 | 0:1.1.3-1.el10em ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 9 | 0:1.1.3-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | DevWorkspace Operator 0.42 | 1782400868 ≤ 𝑥 < * | ADP |
| Red Hat | DevWorkspace Operator 0.42 | 1782401674 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.10 | 1784646026 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.10 | 1784564438 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.10 | 1786549100 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1783025820 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1784158679 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.8 | 1784646786 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.8 | 1784738758 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.9 | 1782411809 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785177359 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785177438 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785180878 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.6 | 1784058822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | 1784229508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | 1786456658 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | 1786908777 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1781686446 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1782891812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1782891812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1781686458 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1782891789 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1782891789 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 | 1783352589 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502022 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502465 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502025 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502494 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502401 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502403 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502022 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502023 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502029 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502445 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194638 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194353 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784196588 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784195620 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194309 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194144 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194188 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194653 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194144 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194980 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194347 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194971 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784128388 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784128860 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126780 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127787 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126762 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127762 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126832 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126774 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127135 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126733 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127775 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057515 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057529 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057884 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783058067 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057868 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783058284 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612432 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783611973 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612714 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783611805 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1784121108 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612119 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612163 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1785194512 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932114 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782931768 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932104 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536000 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783535989 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536515 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932521 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018461 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018421 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537001 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537586 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932969 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933015 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933042 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537392 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933235 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933251 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537955 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933417 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537742 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933602 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783019377 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934054 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934036 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934284 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 | 1782403274 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift GitOps 1.19 | 1785149260 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift GitOps 1.2 | 1785211346 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.1 | 1783750447 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1783751865 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1784353904 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.15 | 1784351966 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1783955846 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1784125838 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783961973 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783959819 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968972 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330572 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330572 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330691 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326690 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332061 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326690 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783183848 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1782992727 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1782903492 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-go.crypto |
| ||||||||||||||
| snapd |
| ||||||||||||||
| google-guest-agent |
| ||||||||||||||
| lxd |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| alloy |
| ||||||||||||||||
| amazon-ssm-agent |
| ||||||||||||||||
| apptainer |
| ||||||||||||||||
| apptainer-sle15_6 |
| ||||||||||||||||
| buildah |
| ||||||||||||||||
| cosign |
| ||||||||||||||||
| cosign-bash-completion |
| ||||||||||||||||
| cosign-zsh-completion |
| ||||||||||||||||
| google-guest-agent |
| ||||||||||||||||
| google-osconfig-agent |
| ||||||||||||||||
| kubevirt-manifests |
| ||||||||||||||||
| kubevirt-virtctl |
| ||||||||||||||||
| podman |
| ||||||||||||||||
| podman-docker |
| ||||||||||||||||
| podman-remote |
| ||||||||||||||||
| podmansh |
| ||||||||||||||||
| terraform-provider-aws |
| ||||||||||||||||
| terraform-provider-azurerm |
| ||||||||||||||||
| terraform-provider-external |
| ||||||||||||||||
| terraform-provider-google |
| ||||||||||||||||
| terraform-provider-helm |
| ||||||||||||||||
| terraform-provider-kubernetes |
| ||||||||||||||||
| terraform-provider-local |
| ||||||||||||||||
| terraform-provider-null |
| ||||||||||||||||
| terraform-provider-random |
| ||||||||||||||||
| terraform-provider-tls |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| amazon-cloudwatch-agent |
| ||||
| amazon-ssm-agent |
| ||||
| containerd |
| ||||
| containerd-debuginfo |
| ||||
| containerd-debugsource |
| ||||
| containerd-stress |
| ||||
| containerd-stress-debuginfo |
| ||||
| docker |
| ||||
| docker-debuginfo |
| ||||
| docker-debugsource |
| ||||
| nerdctl |
| ||||
| nerdctl-debuginfo |
| ||||
| rclone |
| ||||
| rclone-debuginfo |
| ||||
| rclone-debugsource |
| ||||
| runfinch-finch |
|
Azure Linux Releases
Azure Package | |||
|---|---|---|---|
| cert-manager |
| ||
| cf-cli |
| ||
| docker-buildx |
| ||
| docker-compose |
| ||
| gh |
| ||
| kubernetes |
| ||
| kubevirt |
| ||
| moby-engine |
| ||
| packer |
| ||
| telegraf |
|
Common Weakness Enumeration
- CWE-347 - Improper Verification of Cryptographic SignatureThe software does not verify, or incorrectly verifies, the cryptographic signature for data.
- CWE-1284 - Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
References