5.3 CVE-2026-12353

Enriched by CISA DOS
 

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.
https://nvd.nist.gov/vuln/detail/CVE-2026-12353

Categories

CWE-772 : Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed. Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.) It is good practice to be responsible for freeing all resources you allocate and to be consistent with how and where you free resources in a function. If you allocate resources that you intend to free upon completion of the function, you must be sure to free the resources at all exit points for that function including error conditions. Chain: anti-virus product encounters a malformed file but returns from a function without closing a file descriptor (CWE-775) leading to file descriptor consumption (CWE-400) and failed scans. Sockets not properly closed when attacker repeatedly connects and disconnects from server. Does not shut down named pipe connections if malformed data is sent. Chain: memory leak (CWE-404) leads to resource exhaustion. Product allows exhaustion of file descriptors when processing a large number of TCP packets. Port scan triggers CPU consumption with processes that attempt to read data from closed sockets. Product allows resource exhaustion via a large number of calls that do not complete a 3-way handshake. Chain: Return values of file/socket operations are not checked (CWE-252), allowing resultant consumption of file descriptors (CWE-772).

References


 

AFFECTED (from MITRE)

Vendor Product Versions
Red Hat Red Hat Certificate System 9
    Red Hat Red Hat Enterprise Linux 10
      Red Hat Red Hat Enterprise Linux 8
        Red Hat Red Hat Enterprise Linux 9
          © 2022 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

          CPE

          cpe start end

          REMEDIATION


          EXPLOITS

          Exploit-db.com

          id description date
          No known exploits

          POC Github

          Url
          No known exploits

          Other Nist (github, ...)

          Url
          No known exploits

          CAPEC

          Common Attack Pattern Enumerations and Classifications

          id description severity
          469 HTTP DoS
          		Low

          MITRE

          Techniques

          id description
          T1499.002 Endpoint Denial of Service: Service Exhaustion Flood
          © 2022 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

          Mitigations

          id description
          M1037 Leverage services provided by Content Delivery Networks (CDN) or providers specializing in DoS mitigations to filter traffic upstream from services. Filter boundary traffic by blocking source addresses sourcing the attack, blocking ports that are being targeted, or blocking protocols being used for transport.
          © 2022 The MITRE Corporation. Esta obra se reproduce y distribuye con el permiso de The MITRE Corporation.