CVE-2026-83536

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-83536", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2026-08-31T16:53:08.479Z", "datePublished": "2026-10-12T18:50:23.855Z", "dateUpdated": "2026-10-13T16:36:36.948Z"}, "containers": {"cna": {"title": "Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header bytes, the attacker can exhaust server resources, specifically file descriptors, leading to a Denial of Service (DoS) that prevents legitimate Prometheus metric scraping and alerting."}], "affected": [{"vendor": "Red Hat", "product": "Red Hat OpenStack Platform 18.0", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhoso-operators/openstack-network-exporter-rhel9", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:openstack:18.0"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-83536", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526401", "name": "RHBZ#2526401", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2026-10-12T18:28:52.398Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-400: Uncontrolled Resource Consumption", "workarounds": [{"lang": "en", "value": "Restrict network access to the `openstack-network-exporter` service. Configure firewall rules to limit incoming connections to port 1981 (the default port for the exporter) only from trusted hosts or networks that require access for Prometheus scraping. This will reduce the attack surface by preventing unauthenticated adjacent attackers from reaching the service. Applying firewall rules may require restarting network services or the firewall daemon to take effect."}], "timeline": [{"lang": "en", "time": "2026-08-31T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-10-12T18:28:52.398Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-12T18:50:23.855Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-13T16:36:05.064864Z", "id": "CVE-2026-83536", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-13T16:36:36.948Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:/a:redhat:openstack:18.0"], "vendor": "Red Hat", "product": "Red Hat OpenStack Platform 18.0", "packageName": "rhoso-operators/openstack-network-exporter-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-08-31T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-10-12T18:28:52.398Z", "value": "Made public."}], "datePublic": "2026-10-12T18:28:52.398Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-83536", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526401", "name": "RHBZ#2526401", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "Restrict network access to the `openstack-network-exporter` service. Configure firewall rules to limit incoming connections to port 1981 (the default port for the exporter) only from trusted hosts or networks that require access for Prometheus scraping. This will reduce the attack surface by preventing unauthenticated adjacent attackers from reaching the service. Applying firewall rules may require restarting network services or the firewall daemon to take effect."}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header bytes, the attacker can exhaust server resources, specifically file descriptors, leading to a Denial of Service (DoS) that prevents legitimate Prometheus metric scraping and alerting."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-12T18:50:23.855Z"}, "x_redhatCweChain": "CWE-400: Uncontrolled Resource Consumption"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-83536", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-13T16:36:05.064864Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-10-13T16:36:27.588Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-83536", "state": "PUBLISHED", "dateUpdated": "2026-10-12T18:50:23.855Z", "dateReserved": "2026-08-31T16:53:08.479Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2026-10-12T18:50:23.855Z", "assignerShortName": "redhat"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openstack:18.0"], "defaultStatus": "affected", "packageName": "rhoso-operators/openstack-network-exporter-rhel9", "product": "Red Hat OpenStack Platform 18.0", "vendor": "Red Hat"}], "source": "secalert@redhat.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header bytes, the attacker can exhaust server resources, specifically file descriptors, leading to a Denial of Service (DoS) that prevents legitimate Prometheus metric scraping and alerting."}], "id": "CVE-2026-83536", "lastModified": "2026-10-15T16:33:26.290", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "secalert@redhat.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-83536", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-13T16:36:05.064864Z", "version": "2.0.3"}}]}, "published": "2026-10-12T19:16:39.997", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2026-83536"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526401"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "secalert@redhat.com", "type": "Secondary"}]}

{"bugzilla": {"description": "openstack-network-exporter: http.Server has no ReadHeaderTimeout / ReadTimeout (Slowloris)", "id": "2526401", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526401"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-400", "details": ["A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header bytes, the attacker can exhaust server resources, specifically file descriptors, leading to a Denial of Service (DoS) that prevents legitimate Prometheus metric scraping and alerting."], "mitigation": {"lang": "en:us", "value": "Restrict network access to the `openstack-network-exporter` service. Configure firewall rules to limit incoming connections to port 1981 (the default port for the exporter) only from trusted hosts or networks that require access for Prometheus scraping. This will reduce the attack surface by preventing unauthenticated adjacent attackers from reaching the service. Applying firewall rules may require restarting network services or the firewall daemon to take effect."}, "name": "CVE-2026-83536", "package_state": [{"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "rhoso-operators/openstack-network-exporter-rhel9", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-10-12T18:28:52Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-83536\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-83536"], "statement": "This vulnerability is rated as having Moderate impact because it only results in a denial of service against the telemetry endpoint, without affecting data confidentiality, data integrity, or core OpenStack services. In standard Red Hat OpenStack Services on OpenShift deployments, openstack-network-exporter is utilized to provide cluster monitoring data rather than handling user-facing traffic or critical control operations. While an unauthenticated network adversary could exhaust available socket connections by slowly transmitting HTTP requests, the disruption is limited to metric collection and alerting for network services.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Red Hat OpenStack Platform 18.0", "source": "cna", "vendor": "Red Hat"}, "product": "openstack", "vendor": "redhat"}, {"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Red Hat OpenStack Platform 18.0", "source": "cna", "vendor": "Red Hat"}, "product": "openstack_platform", "vendor": "redhat"}], "created": "2026-10-12T20:45:17.866165+00:00", "updated": "2026-10-28T22:19:25.964447+00:00", "vendors": ["redhat", "redhat$PRODUCT$openstack", "redhat$PRODUCT$openstack_platform"]}