AZL-26730 CVE-2023-26964 affecting package kata-containers for versions less than 3.2.0.azl0-1

🗓️ 11 Apr 2023 14:15:07Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Denial of service in kata containers before 3.2.0 due to HTTP version two stream stacking causing high memory and CPU.

Reporter	Title	Published	Views	Family All 152
Tenable Nessus	Azure Linux 3.0 Security Update: kata-containers / rpm-ostree (CVE-2023-26964)	10 Feb 202500:00	–	nessus
Tenable Nessus	Fedora 37 : clevis-pin-tpm2 / greetd / keyring-ima-signer / libkrun / etc (2023-37ae269843)	18 May 202300:00	–	nessus
Tenable Nessus	Fedora 38 : clevis-pin-tpm2 / greetd / keyring-ima-signer / libkrun / etc (2023-cc21019773)	7 May 202300:00	–	nessus
Tenable Nessus	Fedora 39 : clevis-pin-tpm2 / greetd / keyring-ima-signer / libkrun / etc (2023-d88521bfc5)	7 Nov 202300:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kata-containers / rpm-ostree (CVE-2023-26964)	3 Jul 202400:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : kanidm (openSUSE-SU-2024:0294-1)	10 Sep 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rustup (SUSE-SU-2023:2603-1)	23 Jun 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-26964	30 Aug 202500:00	–	nessus
BDU FSTEC	The vulnerability of the HTTP library for Rust Hyper, related to unlimited resource distribution, allows attackers to cause service failures.	20 Jun 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-26964 affecting package rpm-ostree for versions less than 2022.1-7	26 Aug 202416:27	–	cbl_mariner

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-26964

21 Apr 2026 04:23Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00318