PT-2026-64150 · Red Hat · Red Hat Certificate System 9+3

Thibault Guittet · CVE-2026-12353 · Publicado 2026-07-23 · Atualizado 2026-07-23

Mitre

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2026-12353

Produtos afetados

Red Hat Certificate System 9

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Referências · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=2489056 · Nota
• https://access.redhat.com/security/cve/CVE-2026-12353 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-12353 · Nota de Segurança