CVEvulnerability

CVE-2026-19519

4.3 MEDIUM Published 2026-08-11 Modified 2026-08-14 Official page ↗
Status
Awaiting Analysis
Published
2026-08-11
Last modified
2026-08-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-617

Description

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.

Related

Weakness · CWE (1)

  • CWE-617 Reachable Assertion weakness

References