Fedora Account System
Red Hat Associate
Red Hat Customer
A denial-of-service vulnerability was discovered in skupper-router within the AMQP field parser. The flaw is caused by unbounded recursion when processing deeply nested or specially crafted AMQP messages, leading to a stack overflow. An attacker who can send messages to the router can trigger this crash. Exploitation requires the attacker to possess a valid x.509 certificate signed by the Red Hat Service Interconnect network's certificate authority. Successful exploitation results in the skupper-router process crashing, terminating all active connections and preventing new traffic from being routed through the affected node.
This issue has been addressed in the following products: Service Interconnect 2 for RHEL 8 Service Interconnect 2 for RHEL 9 Via RHSA-2026:82316 https://access.redhat.com/errata/RHSA-2026:82316
This issue has been addressed in the following products: Service Interconnect 2 for RHEL 9 Via RHSA-2026:82340 https://access.redhat.com/errata/RHSA-2026:82340