{"id":"CVE-2026-88763","aliases":["EUVD-2026-75288","GHSA-j54j-r8q7-v2hq","RHSA-2026:82316"],"status":"published","title":"Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service","description":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00533,"percentile":0.45465,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2026-09-10T07:09:10Z","modified":"2026-10-14T10:48:13Z","fixes":[{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-common","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-debuginfo","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-debugsource","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-docs","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-tools","fixed_in":["0:3.5.3-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-common","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-debuginfo","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-debugsource","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-docs","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-tools","fixed_in":["0:3.5.3-1.el9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el8","package":"skupper-router-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:service_interconnect:2.0::el9","package":"skupper-router-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.el9"}]}]}],"products":[{"vendor":"red hat","product":"service interconnect 2 for rhel 8"},{"vendor":"red hat","product":"service interconnect 2 for rhel 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:82316","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82340","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-88763","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531301","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88763","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j54j-r8q7-v2hq"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_service_interconnect/2.2/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82316.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88763","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-88763","title":"Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service","description":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.","status":"published","published":"2026-09-10T07:09:10.227Z","modified":"2026-10-13T21:40:40.196Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T13:41:53.237769Z"}],"euvd":[{"id":"EUVD-2026-75288","description":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.","status":"published","published":"2026-09-10T07:09:10Z","modified":"2026-10-13T21:40:40Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:18.393051Z"}],"ghsa":[{"id":"GHSA-j54j-r8q7-v2hq","title":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used...","description":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.","status":"published","published":"2026-09-10T09:31:33Z","modified":"2026-10-14T00:31:13Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:13:22.12395Z"}],"nvd":[{"id":"CVE-2026-88763","description":"A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.","status":"published","published":"2026-09-10T08:17:02.223Z","modified":"2026-10-13T22:19:30.137Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:12:45.93749Z"}],"osv":[{"id":"RHSA-2026:82316","title":"Red Hat Security Advisory: Red Hat Service Interconnect 2.2.3 Release (rpms)","status":"published","published":"2026-10-14T10:32:44Z","modified":"2026-10-14T10:48:13.459356708Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.547034Z"}]}}