Description
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — |
| Red Hat | Red Hat Quay 3 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2026-19519 vdb-entry
- RHBZ#2513781 issue-tracking