Changeflow GovPing Data Privacy & Cybersecurity Red Hat Hardened Images RPMs Allow DoS Attacks
Priority review Notice Added Final

Red Hat Hardened Images RPMs Allow DoS Attacks

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund disclosed a medium-severity vulnerability (CVSS Base Score 6.5, CVSS Temporal Score 5.7) in Red Hat Hardened Images RPMs affecting Red Hat Enterprise Linux. The vulnerability enables remote, anonymous attackers to conduct Denial of Service attacks. The advisory was published on 23 April 2026 with current status as of 24 April 2026. Affected organizations running Red Hat Enterprise Linux Hardened Images RPMs should apply available mitigations.

“Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Hardened Images RPMs ausnutzen, um einen Denial of Service Angriff durchzuführen.”

Published by CERT-Bund on wid.cert-bund.de . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

CERT-Bund is the German federal cybersecurity agency's incident response team, run by the BSI. Their advisory feed publishes vulnerability disclosures and active exploitation warnings for software in widespread enterprise use: VPN appliances, email servers, file transfer products, ERP systems, browsers, hypervisors. Around 280 advisories a month, each with a CVSS score, affected versions, and remediation guidance. The advisories are written in German but cover the same vulnerabilities that show up in CISA, NCSC-UK, and JPCERT bulletins, often hours earlier. Watch this if you patch enterprise software, run a SOC, or write detection rules. GovPing publishes each advisory with the affected vendor, CVSS score, and original CERT-Bund link.

What changed

CERT-Bund published a security advisory disclosing a vulnerability in Red Hat Hardened Images RPMs for Red Hat Enterprise Linux. The flaw has a CVSS Base Score of 6.5 (medium) and CVSS Temporal Score of 5.7 (medium), with remote attack capability confirmed. The vulnerability allows remote, anonymous attackers to exploit the flaw and conduct denial of service attacks. Mitigations are available.

Organizations running Red Hat Enterprise Linux Hardened Images RPMs should monitor for patches or updates from Red Hat and apply available mitigations promptly to reduce the risk of denial of service attacks.

Archived snapshot

Apr 24, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-1254] Red Hat Hardened Images RPMs (Storable for Perl): Schwachstelle ermöglicht Denial of Service CVSS Base Score 6.5 (mittel) CVSS Temporal Score 5.7 (mittel) Remoteangriff ja Datum 23.04.2026 Stand 24.04.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux
  • Sonstiges
  • UNIX

Produktbeschreibung

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Produkte

23.04.2026
- Red Hat Enterprise Linux Hardened Images RPMs

Angriff

Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Hardened Images RPMs ausnutzen, um einen Denial of Service Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-Bund
Published
April 23rd, 2026
Instrument
Notice
Branch
Executive
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Technology companies Government agencies Manufacturers
Industry sector
3341 Computer & Electronics Manufacturing
Activity scope
Vulnerability disclosure Software patching
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!