CVE-2026-19519

Published: Aug 11, 2026Modified: Aug 14, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

https://access.redhat.com/security/cve/CVE-2026-19519

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2513781

Source: secalert@redhat.com

Timeline

No history available yet.