Description
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.
Published: 2026-07-23
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Repeated HTTP requests to the RHCS TLS endpoint can trigger an Out of Memory condition, causing the Java process to crash and the service to become unavailable. The flaw is a memory‑leak vulnerability (CWE‑772) that can be exploited by any unauthenticated user without needing privileged access.

Affected Systems

Red Hat Certificate System 9 and Red Hat Enterprise Linux releases 8, 9, and 10 are affected.

Risk and Exploitability

The CVSS base score of 5.3 indicates a moderate severity. EPSS of less than 1% suggests a low likelihood of exploitation, and the vulnerability is not listed in CISA KEV. Repeated attempts can force a restart of the RHCS process, potentially requiring manual intervention.

Generated by OpenCVE AI on August 3, 2026 at 21:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Red Hat Certificate System and associated RHEL packages to the latest release that fixes the memory‑leak in the TLS endpoint.
  • Configure your environment to monitor RHCS memory metrics and set alerts for abnormal usage spikes.
  • If a crash occurs, restart the RHCS service promptly to restore availability, and apply rate‑limiting or traffic filtering on the TLS endpoint to mitigate repeated request floods.

Generated by OpenCVE AI on August 3, 2026 at 21:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 02 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat dogtag Certificate System
Vendors & Products Redhat dogtag Certificate System

Fri, 24 Jul 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 23 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
Description An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.
Title Rhcs: memory leak during https connection leads to denial of service
First Time appeared Redhat
Redhat certificate System
Redhat enterprise Linux
Weaknesses CWE-772
CPEs cpe:/a:redhat:certificate_system:9
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat certificate System
Redhat enterprise Linux
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

Redhat Certificate System Dogtag Certificate System Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-07-24T22:05:19.900Z

Reserved: 2026-06-15T21:27:58.344Z

Link: CVE-2026-12353

cve-icon Vulnrichment

Updated: 2026-07-24T22:05:15.777Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-07-23T20:17:07.077

Modified: 2026-07-24T23:16:49.730

Link: CVE-2026-12353

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T21:15:04Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime