Security Check
Zurück zum Feed
Hoch 8.9Software

CVE-2026-97689

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

Amazon Linux 2, Red Hat Enterprise Linux, Red Hat Satellite, RESF Rocky Linux, SUSE Linux, SUSE openSUSE, Oracle Linux…

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long…

29. Sep 2026

Original bei CERT-Bund öffnen

Ausgewertete Quellen