CERT24RHSA-2026:72508 — Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF IBU extras updateLoading data…
CERT24Threat Observatory
Period

RHSA-2026:72508 — Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF IBU extras update

The source describes two denial-of-service (DoS) conditions. A remote attacker can send a specially crafted HTTP/2 SETTINGS frame that may cause an infinite loop writing CONTINUATION frames and resource exhaustion. A flaw in the SSH component allows an unauthenticated client to provide a public key with excessively large key parameters, potentially causing prolonged CPU consumption during signature verification and a denial of service.

← Back to intelligence

RHSA-2026:72508 — Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF IBU extras update

The source describes two denial-of-service (DoS) conditions. A remote attacker can send a specially crafted HTTP/2 SETTINGS frame that may cause an infinite loop writing CONTINUATION frames and resource exhaustion. A flaw in the SSH component allows an unauthenticated client to provide a public key with excessively large key parameters, potentially causing prolonged CPU consumption during signature verification and a denial of service.