Skip to content
Fencer Vulns
medium 4.9

CVE-2026-14362 json

Denial of service via crafted push/pull gossip message in memberlist

published 2026-07-08 4 mo ago modified 2026-10-25 15 d ago also EUVD-2026-42342

cvss
4.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 16%
public exploits
0
none known

Summary

HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node and cause the process to terminate. This vulnerability (CVE-2026-14362) is fixed in memberlist 0.6.0.

Patch / fix

  • HashiCorp Shared library 0.6.0
  • alloy openSUSE Tumbleweed 1.20.1-1.1

opensuse advisories openSUSE-SU-2026:12114-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-14362 updated cvss 7.5

github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling

  • Red Hat Ceph Storage 5 rhceph/snmp-notifier-rhel8, rhceph/rhceph-5-dashboard-rhel8 Red Hat Ceph Storage 6 rhceph/snmp-notifier-rhel9, rhceph/rhceph-promtail-rhel9, rhceph/rhceph-6-dashboard-rhel9 Red Hat Ceph Storage 7 rhceph/snmp-notifier-rhel9 Red Hat Ceph Storage 8 rhceph/snmp-notifier-rhel9 Red Hat Ceph Storage 9 rhceph/alloy-rhel10, rhceph/grafana-rhel10, rhceph/snmp-notifier-rhel10
    affected: workaround, no fix available “Fix deferred”
  • Red Hat OpenShift Container Platform 5 openshift5/ose-prometheus-alertmanager-rhel9
    affected: workaround, no fix available
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 rhacm2/prometheus-alertmanager-rhel9 1787263623
    fixed: vendor fix RHSA-2026:60387
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 rhacm2/prometheus-alertmanager-rhel9 1787263182
    fixed: vendor fix RHSA-2026:60390
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 rhacm2/prometheus-alertmanager-rhel9 1786976979
    fixed: vendor fix RHSA-2026:60388
  • Red Hat Advanced Cluster Management for Kubernetes 2.15 rhacm2/prometheus-alertmanager-rhel9 1786547824
    fixed: vendor fix RHSA-2026:54427
  • Red Hat Advanced Cluster Management for Kubernetes 2.16 rhacm2/prometheus-alertmanager-rhel9 1786909156
    fixed: vendor fix RHSA-2026:57191
  • Red Hat Advanced Cluster Management for Kubernetes 2.17 rhacm2/prometheus-alertmanager-rhel9 1787229700
    fixed: vendor fix RHSA-2026:60386
show 13 more
  • Red Hat OpenShift Container Platform 4.14 openshift4/ose-prometheus-alertmanager 1792891119
    fixed: vendor fix RHSA-2026:89839
  • Red Hat OpenShift Container Platform 4.16 openshift4/ose-prometheus-alertmanager-rhel9 1792891837
    fixed: vendor fix RHSA-2026:89715
  • Red Hat OpenShift Container Platform 4.17 openshift4/ose-prometheus-alertmanager-rhel9 1789939284
    fixed: vendor fix RHSA-2026:70587
  • Red Hat OpenShift Container Platform 4.18 openshift4/ose-prometheus-alertmanager-rhel9 1788578046
    fixed: vendor fix RHSA-2026:65852
  • Red Hat OpenShift Container Platform 4.19 openshift4/ose-prometheus-alertmanager-rhel9 1786984418
    fixed: vendor fix RHSA-2026:57408
  • Red Hat OpenShift Container Platform 4.20 openshift4/ose-prometheus-alertmanager-rhel9 1787020721
    fixed: vendor fix RHSA-2026:57545
  • Red Hat OpenShift Container Platform 4.21 openshift4/ose-prometheus-alertmanager-rhel9 1786500210
    fixed: vendor fix RHSA-2026:54602
  • Red Hat OpenShift Container Platform 4.22 openshift4/ose-prometheus-alertmanager-rhel9 1786584932
    fixed: vendor fix RHSA-2026:54770
  • Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/loki-rhel9-operator
    not affected: vulnerable code not present
  • Red Hat Multicluster Global Hub multicluster-globalhub/multicluster-globalhub-grafana-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/acm-grafana-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 rhacm2/thanos-rhel9 1787685239, rhacm2/console-rhel9 1787687062, rhacm2/prometheus-rhel9 1787261499, rhacm2/acm-grafana-rhel9 1787682482, rhacm2/acm-search-v2-rhel9 1787688827, rhacm2/node-exporter-rhel9 1787263326, +34 more Red Hat Advanced Cluster Management for Kubernetes 2.13 rhacm2/thanos-rhel9 1787263906, rhacm2/acm-cli-rhel9 1787259085, rhacm2/console-rhel9 1787339249, rhacm2/prometheus-rhel9 1787263757, rhacm2/acm-grafana-rhel9 1787644958, rhacm2/acm-search-v2-rhel9 1787682112, +37 more Red Hat Advanced Cluster Management for Kubernetes 2.14 rhacm2/thanos-rhel9 1787614805, rhacm2/acm-cli-rhel9 1786923505, rhacm2/console-rhel9 1787339248, rhacm2/prometheus-rhel9 1786976997, rhacm2/acm-grafana-rhel9 1787645355, rhacm2/acm-search-v2-rhel9 1787682033, +37 more Red Hat Advanced Cluster Management for Kubernetes 2.15 rhacm2/thanos-rhel9 1786549663, rhacm2/acm-cli-rhel9 1786547726, rhacm2/console-rhel9 1786547771, rhacm2/prometheus-rhel9 1786547911, rhacm2/acm-grafana-rhel9 1786549752, rhacm2/acm-search-v2-rhel9 1786547826, +39 more Red Hat Advanced Cluster Management for Kubernetes 2.16 rhacm2/thanos-rhel9 1786909435, rhacm2/acm-cli-rhel9 1786908319, rhacm2/console-rhel9 1786908361, rhacm2/prometheus-rhel9 1786909036, rhacm2/acm-grafana-rhel9 1786908968, rhacm2/acm-search-v2-rhel9 1786909139, +40 more Red Hat Advanced Cluster Management for Kubernetes 2.17 rhacm2/thanos-rhel9 1787229716, rhacm2/acm-cli-rhel9 1787227626, rhacm2/console-rhel9 1787335105, rhacm2/prometheus-rhel9 1787230287, rhacm2/acm-grafana-rhel9 1787316467, rhacm2/acm-search-v2-rhel9 1787681651, +39 more
    +4 more products
    Red Hat Ansible Automation Platform 2 ansible-automation-platform/platform-operator-bundle Red Hat Enterprise Linux 8 grafana, grafana-loki, grafana-mssql, grafana-mysql, grafana-selinux, grafana-graphite, +8 more Red Hat Enterprise Linux 9 grafana, rhel9/grafana, grafana-selinux Red Hat Enterprise Linux 10 grafana, rhel10/grafana
    not affected: vulnerable code not present
  • Red Hat OpenShift Container Platform 4 openshift4/metallb-rhel8, openshift4/metallb-rhel9, openshift4/ose-thanos-rhel8, openshift4/oc-mirror-plugin-rhel9
    not affected: inline mitigations already exist
  • Red Hat OpenShift Container Platform 4.14 openshift4/ose-cli 1792888757, openshift4/ose-pod 1792892941, openshift4/ose-tests 1792894673, openshift4/ose-console 1792894610, openshift4/ose-coredns 1792892001, openshift4/ose-deployer 1792890904, +189 more Red Hat OpenShift Container Platform 4.16 openshift4/ose-cli-rhel9 1792881772, openshift4/ose-pod-rhel9 1792881268, openshift4/ose-sdn-rhel9 1792891515, openshift4/ose-etcd-rhel9 1792884751, openshift4/ose-tests-rhel9 1792892635, openshift4/ose-tools-rhel9 1792881835, +182 more Red Hat OpenShift Container Platform 4.17 openshift4/frr-rhel9 1789938330, openshift4/ose-cli-rhel9 1789937904, openshift4/ose-pod-rhel9 1789937463, openshift4/ose-etcd-rhel9 1789937632, openshift4/ose-tests-rhel9 1790075131, openshift4/ose-tools-rhel9 1790073665, +180 more Red Hat OpenShift Container Platform 4.18 openshift4/frr-rhel9 1788576352, openshift4/ose-cli-rhel9 1788576309, openshift4/ose-pod-rhel9 1788575535, openshift4/ose-etcd-rhel9 1788576053, openshift4/ose-tests-rhel9 1788579480, openshift4/ose-tools-rhel9 1788576163, +180 more Red Hat OpenShift Container Platform 4.19 openshift4/frr-rhel9 1786760573, openshift4/ose-cli-rhel9 1787046152, openshift4/ose-pod-rhel9 1786802866, openshift4/ose-etcd-rhel9 1786767009, openshift4/ose-tests-rhel9 1787106695, openshift4/ose-tools-rhel9 1787105251, +182 more Red Hat OpenShift Container Platform 4.20 openshift4/frr-rhel9 1787059366, openshift4/ose-cli-rhel9 1787018980, openshift4/ose-pod-rhel9 1787020295, openshift4/ose-etcd-rhel9 1787020061, openshift4/ose-tests-rhel9 1787021657, openshift4/ose-tools-rhel9 1787019160, +184 more
    not affected: vulnerable code not present

5 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
4 mo ago

Exploit prediction

0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

  • HashiCorp Shared library

Classification

Weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.