PT-2026-21259 · Unknown+1 · Consul-K8S-Fips+1

Publicado 2026-01-30 · Atualizado 2026-02-26 · CVE-2025-47903

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas consul-k8s-fips (versões afetadas não especificadas)

Descrição O pacote consul-k8s-fips é afetado por múltiplos problemas de segurança. O pacote net/http não manipula corretamente os terminadores de linha em dados chunked, o que pode potencialmente causar problemas. Além disso, a validação da cadeia de certificados não restringe adequadamente os SANs curinga quando uma restrição de subdomínio excluído está presente. O pacote também inclui o Moby, um framework de contêineres de código aberto.

Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Identificadores relacionados

CLEANSTART-2026-BQ46815

CLEANSTART-2026-BT39952

CLEANSTART-2026-DV06422

CLEANSTART-2026-IA37596

CLEANSTART-2026-KK99760

CLEANSTART-2026-ME47927

CLEANSTART-2026-PA85871

CLEANSTART-2026-SO16176

CLEANSTART-2026-VU62737

CVE-2025-47903

Produtos afetados

Moby

Consul-K8S-Fips

Referências · 47

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VU62737 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BT39952.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ME47927 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DV06422 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BQ46815 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KK99760.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IA37596.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PA85871.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KK99760 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BQ46815.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DV06422.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IA37596 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ME47927.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PA85871 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BT39952 · Nota