{ "public_date" : "2026-03-18T13:00:31Z", "bugzilla" : { "description" : "github.com/jackc/pgproto3: pgproto3: Denial of Service via negative field length in DataRow message", "id" : "2448626", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2448626" }, "cwe" : "CWE-129", "details" : [ "No description is available for this CVE." ], "statement" : "This CVE has been marked as Rejected by the assigning CNA.", "affected_release" : [ { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-06-02T00:00:00Z", "advisory" : "RHSA-2026:22450", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "osbuild-composer-0:165.1-2.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-06-03T00:00:00Z", "advisory" : "RHSA-2026:22714", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "osbuild-composer-0:165.1-2.el9_8" }, { "product_name" : "Multicluster Global Hub 1.4.5", "release_date" : "2026-06-01T00:00:00Z", "advisory" : "RHSA-2026:22347", "cpe" : "cpe:/a:redhat:multicluster_globalhub:1.4::el9", "package" : "multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439" }, { "product_name" : "Multicluster Global Hub 1.6.5", "release_date" : "2026-06-04T00:00:00Z", "advisory" : "RHSA-2026:23345", "cpe" : "cpe:/a:redhat:multicluster_globalhub:1.6::el9", "package" : "multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118" }, { "product_name" : "Red Hat multicluster global hub 1.5.3", "release_date" : "2026-05-28T00:00:00Z", "advisory" : "RHSA-2026:21769", "cpe" : "cpe:/a:redhat:multicluster_globalhub:1.5::el9", "package" : "multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753" }, { "product_name" : "Red Hat Quay 3.1", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11916", "cpe" : "cpe:/a:redhat:quay:3.10::el8", "package" : "quay/quay-rhel8:1776736910" }, { "product_name" : "Red Hat Quay 3.12", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11856", "cpe" : "cpe:/a:redhat:quay:3.12::el8", "package" : "quay/quay-rhel8:1776752646" }, { "product_name" : "Red Hat Quay 3.14", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:21017", "cpe" : "cpe:/a:redhat:quay:3.14::el8", "package" : "quay/quay-rhel8:1779689392" }, { "product_name" : "Red Hat Quay 3.15", "release_date" : "2026-06-09T00:00:00Z", "advisory" : "RHSA-2026:24853", "cpe" : "cpe:/a:redhat:quay:3.15::el8", "package" : "quay/quay-rhel8:1780891395" }, { "product_name" : "Red Hat Quay 3.16", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19375", "cpe" : "cpe:/a:redhat:quay:3.16::el9", "package" : "quay/quay-rhel9:1779204086" }, { "product_name" : "Red Hat Quay 3.17", "release_date" : "2026-06-02T00:00:00Z", "advisory" : "RHSA-2026:22465", "cpe" : "cpe:/a:redhat:quay:3.17::el9", "package" : "quay/quay-rhel9:1779922205" }, { "product_name" : "Red Hat Quay 3.18", "release_date" : "2026-07-29T00:00:00Z", "advisory" : "RHSA-2026:48085", "cpe" : "cpe:/a:redhat:quay:3.18::el9", "package" : "quay/quay-rhel9:1784987273" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:11996", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1776782369" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-06-04T00:00:00Z", "advisory" : "RHSA-2026:23361", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1779811473" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10126", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/createtree-rhel9:1776243434" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10130", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/updatetree-rhel9:1776243434" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10131", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/trillian-database-rhel9:1776243434" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10131", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/trillian-logserver-rhel9:1776243434" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10131", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/trillian-logsigner-rhel9:1776243434" } ], "package_state" : [ { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-controller-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-agent-rhel8", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-controller-rhel8", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-rhel8", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-service-8-rhel8", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-service-9-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-aws-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-operator-bundle", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Will not fix", "package_name" : "rhacm2/acm-search-indexer-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Will not fix", "package_name" : "rhacm2/acm-search-v2-api-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Not affected", "package_name" : "advanced-cluster-security/rhacs-main-rhel8", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Not affected", "package_name" : "advanced-cluster-security/rhacs-rhel8-operator", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Not affected", "package_name" : "advanced-cluster-security/rhacs-roxctl-rhel8", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Not affected", "package_name" : "advanced-cluster-security/rhacs-scanner-v4-rhel8", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Cluster Manager CLI", "fix_state" : "Affected", "package_name" : "ocm-cli-clients/ocm-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/oc-mirror-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-based-installer", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-api-server-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-api-server-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-csr-approver-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-csr-approver-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-node-agent-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-agent-installer-node-agent-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-orchestrator-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-orchestrator-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-aws-cluster-api-controllers-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift on AWS", "fix_state" : "Affected", "package_name" : "rosa", "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Will not fix", "package_name" : "quay/clair-rhel8", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Not affected", "package_name" : "quay/clair-rhel9", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-operator-rhel8", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-operator-rhel9", "cpe" : "cpe:/a:redhat:quay:3" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-4427\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-4427\nhttps://github.com/golang/vulndb/issues/4518\nhttps://github.com/jackc/pgproto3\nhttps://github.com/jackc/pgx/issues/2507\nhttps://securityinfinity.com/research/memory-safety-vulnerabilities-in-go-postgresql-wire-protocol-parsers-pgproto3-pgx" ], "name" : "CVE-2026-4427", "csaw" : false }