Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-12353

Rhcs: memory leak during https connection leads to denial of service

Description

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Certificate System 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References