PT-2026-28436 · Go+10 · Go+33

Osidb Bzimport · CVE-2026-32285 · Publicado 2026-03-16 · Atualizado 2026-07-09

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions versions prior to 2026

Description The Delete function does not correctly validate offsets when processing malformed JSON input. This can result in a negative slice index and a runtime panic, potentially leading to a denial of service attack.

Recommendations Ensure proper validation of offsets when processing JSON input for the Delete function.

Exploit

Correção

DoS

Out of bounds Read

RCE

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-125

CWE-20

CWE-129

CWE-1285

Identificadores relacionados

BDU:2026-04782

CLEANSTART-2026-AP92343

CLEANSTART-2026-AQ65185

CLEANSTART-2026-BG69533

CLEANSTART-2026-DA99134

CLEANSTART-2026-DM19620

CLEANSTART-2026-DO31246

CLEANSTART-2026-FH54780

CLEANSTART-2026-HQ88036

CLEANSTART-2026-JY63371

CLEANSTART-2026-PM81907

CLEANSTART-2026-PY36202

CLEANSTART-2026-WA14162

CLEANSTART-2026-WA84208

CLEANSTART-2026-YZ90223

CVE-2026-32285

GHSA-6G7G-W4F8-9C9X

GO-2026-4514

OPENSUSE-SU-2026:10731-1

OPENSUSE-SU-2026:20788-1

RHSA-2026:35111

RHSA-2026:7191

SUSE-SU-2026:1135-1

SUSE-SU-2026:21756-1

SUSE-SU-2026:21827-1

Produtos afetados

Go

Grafana Alloy

Logging Subsystem For Red Hat Openshift

Logging Subsystem For Red Hat Openshift 6.4

Multicluster Global Hub 1.3.4

Multicluster Global Hub 1.4.5

Multicluster Global Hub 1.5.4

Multicluster Global Hub 1.6.2

Red Hat Advanced Cluster Management For Kubernetes

Red Hat Advanced Cluster Management For Kubernetes 2.14

Red Hat Advanced Cluster Management For Kubernetes 2.15

Red Hat Ansible Automation Platform 2

Red Hat Hardened Images

Red Hat Openshift Container Platform

Red Hat Openshift Container Platform 4

Red Hat Openshift Gitops

Red Hat Openshift Distributed Tracing

Red Hat Openshift Distributed Tracing 3.9.3

Red Hat Openshift For Windows Containers

Red Hat Openstack Platform

Red Hat Openstack Platform 18.0

Github.Com/Buger/Jsonparser

Gitlab Runner

Golang-Github-Buger-Jsonparser

Govulncheck-Vulndb

Jsonparser

Mcphost

Multicluster Engine For Kubernetes 2.10

Multicluster Engine For Kubernetes 2.8

Prometheus

Rootio-Github.Com/Buger/Jsonparser

Tempo

Tempo-Fips

Terragrunt-Fips

Referências · 333

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32285.json · Exploit
• 🔥 https://securityinfinity.com/research/buger-jsonparser-negative-slice-panic-dos-2026 · Exploit
• https://github.com/buger/jsonparser/issues/275 · Nota
• https://github.com/buger/jsonparser · Nota
• https://github.com/buger/jsonparser/pull/276 · Nota
• https://github.com/buger/jsonparser/releases/tag/v1.1.2 · Nota
• https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0 · Nota
• https://github.com/grafana/alloy/releases · Nota
• https://github.com/golang/vulndb/issues/4514 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YZ90223.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JY63371.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WA84208.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DA99134.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AP92343.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HQ88036.json · Nota