{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40983.json" } ], "title": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests", "tracking": { "current_release_date": "2026-08-12T19:39:45+00:00", "generator": { "date": "2026-08-12T19:39:45+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.14" } }, "id": "CVE-2026-40983", "initial_release_date": "2026-06-09T03:46:54.131000+00:00", "revision_history": [ { "date": "2026-06-09T03:46:54.131000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-07-28T10:07:36+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-08-12T19:39:45+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat AMQ Broker 7", "product": { "name": "Red Hat AMQ Broker 7", "product_id": "red_hat_amq_broker_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_broker:7" } } } ], "category": "product_family", "name": "Red Hat AMQ Broker 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat AMQ Clients", "product": { "name": "Red Hat AMQ Clients", "product_id": "red_hat_amq_clients", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_clients:2023" } } } ], "category": "product_family", "name": "Red Hat AMQ Clients" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "product": { "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:camel_quarkus:3" } } } ], "category": "product_family", "name": "Red Hat build of Apache Camel 4 for Quarkus 3" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Apache Camel for Spring Boot 4", "product": { "name": "Red Hat build of Apache Camel for Spring Boot 4", "product_id": "red_hat_build_of_apache_camel_for_spring_boot_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:camel_spring_boot:4" } } } ], "category": "product_family", "name": "Red Hat build of Apache Camel for Spring Boot 4" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Apache Camel - HawtIO 4", "product": { "name": "Red Hat build of Apache Camel - HawtIO 4", "product_id": "red_hat_build_of_apache_camel_-_hawtio_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_hawtio:4" } } } ], "category": "product_family", "name": "Red Hat build of Apache Camel - HawtIO 4" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Apicurio Registry 3", "product": { "name": "Red Hat build of Apicurio Registry 3", "product_id": "red_hat_build_of_apicurio_registry_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:apicurio_registry:3" } } } ], "category": "product_family", "name": "Red Hat build of Apicurio Registry 3" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Debezium 3", "product": { "name": "Red Hat build of Debezium 3", "product_id": "red_hat_build_of_debezium_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:debezium:3" } } } ], "category": "product_family", "name": "Red Hat build of Debezium 3" }, { "branches": [ { "category": "product_name", "name": "Red Hat Build of Keycloak", "product": { "name": "Red Hat Build of Keycloak", "product_id": "red_hat_build_of_keycloak", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:" } } } ], "category": "product_family", "name": "Red Hat Build of Keycloak" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Quarkus", "product": { "name": "Red Hat build of Quarkus", "product_id": "red_hat_build_of_quarkus", "product_identification_helper": { "cpe": "cpe:/a:redhat:quarkus:3" } } } ], "category": "product_family", "name": "Red Hat build of Quarkus" }, { "branches": [ { "category": "product_name", "name": "Red Hat Fuse 7", "product": { "name": "Red Hat Fuse 7", "product_id": "red_hat_fuse_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product": { "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)", "product": { "name": "Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai)", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Dev Spaces", "product": { "name": "Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6", "product": { "name": "Red Hat Satellite 6", "product_id": "red_hat_satellite_6", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_name", "name": "streams for Apache Kafka 2", "product": { "name": "streams for Apache Kafka 2", "product_id": "streams_for_apache_kafka_2", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_streams:2" } } } ], "category": "product_family", "name": "streams for Apache Kafka 2" }, { "branches": [ { "category": "product_name", "name": "Streams for Apache Kafka 3.2.1", "product": { "name": "Streams for Apache Kafka 3.2.1", "product_id": "Streams for Apache Kafka 3.2.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_streams:3.2::el9" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Keycloak 26.6", "product": { "name": "Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9" } } }, { "category": "product_name", "name": "Red Hat build of Keycloak 26.6.5", "product": { "name": "Red Hat build of Keycloak 26.6.5", "product_id": "Red Hat build of Keycloak 26.6.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9" } } } ], "category": "product_family", "name": "Red Hat build of Keycloak" }, { "branches": [ { "category": "product_name", "name": "Red Hat Data Grid 8.6.2", "product": { "name": "Red Hat Data Grid 8.6.2", "product_id": "Red Hat Data Grid 8.6.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_family", "name": "Red Hat JBoss Data Grid" }, { "branches": [ { "category": "product_name", "name": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "product": { "name": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "product_id": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_quarkus:3.33" } } } ], "category": "product_family", "name": "Red Hat Build of Apache Camel" }, { "category": "product_version", "name": "micrometer-core", "product": { "name": "micrometer-core", "product_id": "micrometer-core", "product_identification_helper": { "purl": "pkg:maven/io.micrometer/micrometer-core" } } }, { "category": "product_version", "name": "rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "product": { "name": "rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "product_id": "rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "product_identification_helper": { "purl": "pkg:oci/rhbk-keycloak-rhel9-operator?repository_url=registry.redhat.io/rhbk-keycloak-rhel9-operator" } } }, { "category": "product_version", "name": "rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "product": { "name": "rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "product_id": "rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "product_identification_helper": { "purl": "pkg:oci/rhbk-keycloak-rhel9?repository_url=registry.redhat.io/rhbk-keycloak-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-trustyai-service-rhel9", "product": { "name": "rhoai/odh-trustyai-service-rhel9", "product_id": "rhoai/odh-trustyai-service-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-trustyai-service-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9" } } }, { "category": "product_version", "name": "devspaces/openvsx-rhel9", "product": { "name": "devspaces/openvsx-rhel9", "product_id": "devspaces/openvsx-rhel9", "product_identification_helper": { "purl": "pkg:oci/openvsx-rhel9?repository_url=registry.redhat.io/devspaces/openvsx-rhel9" } } }, { "category": "product_version", "name": "devspaces/pluginregistry-rhel9", "product": { "name": "devspaces/pluginregistry-rhel9", "product_id": "devspaces/pluginregistry-rhel9", "product_identification_helper": { "purl": "pkg:oci/pluginregistry-rhel9?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9" } } }, { "category": "product_version", "name": "devspaces/server-rhel9", "product": { "name": "devspaces/server-rhel9", "product_id": "devspaces/server-rhel9", "product_identification_helper": { "purl": "pkg:oci/server-rhel9?repository_url=registry.redhat.io/devspaces/server-rhel9" } } }, { "category": "product_version", "name": "candlepin", "product": { "name": "candlepin", "product_id": "candlepin", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin" } } }, { "category": "product_version", "name": "candlepin.src", "product": { "name": "candlepin.src", "product_id": "candlepin.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin?arch=src" } } }, { "category": "product_version", "name": "candlepin-selinux", "product": { "name": "candlepin-selinux", "product_id": "candlepin-selinux", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-selinux" } } }, { "category": "product_version", "name": "candlepin::satellite:el8", "product": { "name": "candlepin (satellite:el8)", "product_id": "candlepin::satellite:el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin?rpmmod=satellite:el8" } } }, { "category": "product_version", "name": "candlepin.src::satellite:el8", "product": { "name": "candlepin.src (satellite:el8)", "product_id": "candlepin.src::satellite:el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin?arch=src&rpmmod=satellite:el8" } } }, { "category": "product_version", "name": "candlepin-selinux::satellite:el8", "product": { "name": "candlepin-selinux (satellite:el8)", "product_id": "candlepin-selinux::satellite:el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-selinux?rpmmod=satellite:el8" } } }, { "branches": [ { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "product": { "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "product_id": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11" } } }, { "category": "product_version", "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "product": { "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "product_id": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.6.5-1" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "product_id": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "product": { "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "product_id": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "product_id": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "product": { "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "product_id": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "product_id": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "product": { "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "product_id": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "product_id": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11" } } } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64 as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64" }, "product_reference": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64 as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64 as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le" }, "product_reference": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64 as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64" }, "product_reference": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64 as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64" }, "product_reference": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x as a component of Red Hat build of Keycloak 26.6", "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x" }, "product_reference": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "relates_to_product_reference": "9Base-RHBK-26.6" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat AMQ Broker 7", "product_id": "red_hat_amq_broker_7:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_amq_broker_7" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat AMQ Clients", "product_id": "red_hat_amq_clients:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_amq_clients" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Apache Camel - HawtIO 4", "product_id": "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Apache Camel 4 for Quarkus 3", "product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Apache Camel for Spring Boot 4", "product_id": "red_hat_build_of_apache_camel_for_spring_boot_4:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_apache_camel_for_spring_boot_4" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Apicurio Registry 3", "product_id": "red_hat_build_of_apicurio_registry_3:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_apicurio_registry_3" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Debezium 3", "product_id": "red_hat_build_of_debezium_3:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_debezium_3" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator as a component of Red Hat Build of Keycloak", "product_id": "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator" }, "product_reference": "rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "relates_to_product_reference": "red_hat_build_of_keycloak" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk-keycloak-rhel9/rhbk-keycloak-rhel9 as a component of Red Hat Build of Keycloak", "product_id": "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9" }, "product_reference": "rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "relates_to_product_reference": "red_hat_build_of_keycloak" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat build of Quarkus", "product_id": "red_hat_build_of_quarkus:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_build_of_quarkus" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat Fuse 7", "product_id": "red_hat_fuse_7:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_fuse_7" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9" }, "product_reference": "rhoai/odh-trustyai-service-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9" }, "product_reference": "devspaces/openvsx-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" }, "product_reference": "devspaces/pluginregistry-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/server-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/server-rhel9" }, "product_reference": "devspaces/server-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin" }, "product_reference": "candlepin", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-selinux as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin-selinux" }, "product_reference": "candlepin-selinux", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-selinux (satellite:el8) as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin-selinux::satellite:el8" }, "product_reference": "candlepin-selinux::satellite:el8", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin.src as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin.src" }, "product_reference": "candlepin.src", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin.src (satellite:el8) as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin.src::satellite:el8" }, "product_reference": "candlepin.src::satellite:el8", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin (satellite:el8) as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:candlepin::satellite:el8" }, "product_reference": "candlepin::satellite:el8", "relates_to_product_reference": "red_hat_satellite_6" }, { "category": "default_component_of", "full_product_name": { "name": "micrometer-core as a component of streams for Apache Kafka 2", "product_id": "streams_for_apache_kafka_2:micrometer-core" }, "product_reference": "micrometer-core", "relates_to_product_reference": "streams_for_apache_kafka_2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-40983", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-06-09T05:00:52.290020+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_build_of_apache_camel_for_spring_boot_4:micrometer-core", "red_hat_build_of_debezium_3:micrometer-core", "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9", "red_hat_openshift_dev_spaces:devspaces/server-rhel9", "streams_for_apache_kafka_2:micrometer-core" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2486697" } ], "notes": [ { "category": "description", "text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.", "title": "Vulnerability description" }, { "category": "summary", "text": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial-of-service vulnerability in Micrometer, as a remote unauthenticated attacker can disrupt the availability of affected systems by sending specially crafted gRPC requests. The broad accessibility of gRPC endpoints in typical deployments contributes to the elevated risk, allowing for significant service interruption.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "Red Hat Data Grid 8.6.2", "Red Hat build of Keycloak 26.6.5", "Streams for Apache Kafka 3.2.1" ], "known_affected": [ "red_hat_amq_broker_7:micrometer-core", "red_hat_amq_clients:micrometer-core", "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core", "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core", "red_hat_build_of_apicurio_registry_3:micrometer-core", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "red_hat_build_of_quarkus:micrometer-core", "red_hat_fuse_7:micrometer-core", "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" ], "known_not_affected": [ "red_hat_build_of_apache_camel_for_spring_boot_4:micrometer-core", "red_hat_build_of_debezium_3:micrometer-core", "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9", "red_hat_openshift_dev_spaces:devspaces/server-rhel9", "streams_for_apache_kafka_2:micrometer-core" ], "under_investigation": [ "red_hat_satellite_6:candlepin", "red_hat_satellite_6:candlepin-selinux", "red_hat_satellite_6:candlepin-selinux::satellite:el8", "red_hat_satellite_6:candlepin.src", "red_hat_satellite_6:candlepin.src::satellite:el8", "red_hat_satellite_6:candlepin::satellite:el8" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-40983" }, { "category": "external", "summary": "RHBZ#2486697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40983", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40983" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983" }, { "category": "external", "summary": "https://spring.io/security/cve-2026-40983", "url": "https://spring.io/security/cve-2026-40983" } ], "release_date": "2026-06-09T03:46:54.131000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-08-05T16:20:31+00:00", "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.", "product_ids": [ "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x" ], "url": "https://access.redhat.com/errata/RHSA-2026:50849" }, { "category": "vendor_fix", "date": "2026-07-08T18:28:22+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).", "product_ids": [ "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33" ], "url": "https://access.redhat.com/errata/RHSA-2026:36839" }, { "category": "vendor_fix", "date": "2026-07-20T11:56:31+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids": [ "Red Hat Data Grid 8.6.2" ], "url": "https://access.redhat.com/errata/RHSA-2026:41951" }, { "category": "vendor_fix", "date": "2026-08-05T16:17:28+00:00", "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.", "product_ids": [ "Red Hat build of Keycloak 26.6.5" ], "url": "https://access.redhat.com/errata/RHSA-2026:50848" }, { "category": "vendor_fix", "date": "2026-08-12T19:35:14+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Streams for Apache Kafka 3.2.1" ], "url": "https://access.redhat.com/errata/RHSA-2026:54435" }, { "category": "workaround", "details": "To mitigate this issue, restrict network access to services exposing Micrometer's gRPC endpoints to trusted clients only. Implement firewall rules to limit inbound connections to the specific ports used by gRPC. If gRPC functionality is not essential for the deployment, consider disabling it entirely to eliminate the attack vector. Any changes to network configurations or service settings may require a service restart to take effect, potentially impacting availability during the transition.", "product_ids": [ "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "Red Hat Data Grid 8.6.2", "Red Hat build of Keycloak 26.6.5", "Streams for Apache Kafka 3.2.1", "red_hat_amq_broker_7:micrometer-core", "red_hat_amq_clients:micrometer-core", "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core", "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core", "red_hat_build_of_apicurio_registry_3:micrometer-core", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "red_hat_build_of_quarkus:micrometer-core", "red_hat_fuse_7:micrometer-core", "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" ] }, { "category": "none_available", "details": "Fix deferred", "product_ids": [ "red_hat_build_of_apicurio_registry_3:micrometer-core", "red_hat_fuse_7:micrometer-core" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_amq_broker_7:micrometer-core", "red_hat_amq_clients:micrometer-core", "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core", "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "red_hat_build_of_quarkus:micrometer-core", "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "Red Hat Data Grid 8.6.2", "Red Hat build of Keycloak 26.6.5", "Streams for Apache Kafka 3.2.1", "red_hat_amq_broker_7:micrometer-core", "red_hat_amq_clients:micrometer-core", "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core", "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core", "red_hat_build_of_apache_camel_for_spring_boot_4:micrometer-core", "red_hat_build_of_apicurio_registry_3:micrometer-core", "red_hat_build_of_debezium_3:micrometer-core", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "red_hat_build_of_quarkus:micrometer-core", "red_hat_fuse_7:micrometer-core", "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core", "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_openshift_dev_spaces:devspaces/server-rhel9", "red_hat_satellite_6:candlepin", "red_hat_satellite_6:candlepin-selinux", "red_hat_satellite_6:candlepin-selinux::satellite:el8", "red_hat_satellite_6:candlepin.src", "red_hat_satellite_6:candlepin.src::satellite:el8", "red_hat_satellite_6:candlepin::satellite:el8", "streams_for_apache_kafka_2:micrometer-core" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64", "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x", "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33", "Red Hat Data Grid 8.6.2", "Red Hat build of Keycloak 26.6.5", "Streams for Apache Kafka 3.2.1", "red_hat_amq_broker_7:micrometer-core", "red_hat_amq_clients:micrometer-core", "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core", "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core", "red_hat_build_of_apache_camel_for_spring_boot_4:micrometer-core", "red_hat_build_of_apicurio_registry_3:micrometer-core", "red_hat_build_of_debezium_3:micrometer-core", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9-operator/rhbk-keycloak-rhel9-operator", "red_hat_build_of_keycloak:rhbk-keycloak-rhel9/rhbk-keycloak-rhel9", "red_hat_build_of_quarkus:micrometer-core", "red_hat_fuse_7:micrometer-core", "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core", "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_openshift_dev_spaces:devspaces/server-rhel9", "red_hat_satellite_6:candlepin", "red_hat_satellite_6:candlepin-selinux", "red_hat_satellite_6:candlepin-selinux::satellite:el8", "red_hat_satellite_6:candlepin.src", "red_hat_satellite_6:candlepin.src::satellite:el8", "red_hat_satellite_6:candlepin::satellite:el8", "streams_for_apache_kafka_2:micrometer-core" ] } ], "title": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests" } ] }