CVE-2026-63201
Description
A flaw was found in Netopeer2. This vulnerability allows an authenticated remote user to cause a Denial of Service (DoS) by sending a crafted get Remote Procedure Call (RPC) message containing format specifiers in an invalid filter. When processing the request, the server passes the unvalidated input directly to its internal logging mechanism, causing the application to crash.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Memory
Format string problems allow for information disclosure which can severely simplify exploitation of the program.
Integrity,Confidentiality,Availability
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Format string problems can result in the execution of arbitrary code, buffer overflows, denial of service, or incorrect data representation.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
