Skip to main content

Red Hat Enterprise Linux 10 EUVDEUVD-2026-18817

| CVE-2026-3184 MEDIUM
Authentication Bypass by Alternate Name (CWE-289)
2026-04-03 redhat
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
SUSE
5.6 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Red Hat
3.7 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

5
Severity Changed
Jul 21, 2026 - 19:22 NVD
LOW MEDIUM
CVSS changed
Jul 21, 2026 - 19:22 NVD
3.7 (LOW) 5.3 (MEDIUM)
EUVD ID Assigned
Apr 03, 2026 - 19:15 euvd
EUVD-2026-18817
Analysis Generated
Apr 03, 2026 - 19:15 vuln.today
CVE Published
Apr 03, 2026 - 18:43 nvd
LOW 3.7

DescriptionNVD

A flaw was found in util-linux. Improper hostname canonicalization in the login(1) utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAM_RHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

AnalysisAI

Improper hostname canonicalization in util-linux login(1) utility with the -h option allows remote attackers to bypass host-based PAM access control rules by supplying specially crafted hostnames that are modified before being passed to PAM_RHOST, potentially leading to unauthorized access. The vulnerability affects Red Hat Enterprise Linux 7 through 10 and related products; exploitation requires high attack complexity but no authentication or user interaction. No public exploit code has been identified, and this is not currently confirmed as actively exploited.

Technical ContextAI

The util-linux login(1) utility is responsible for user authentication and session initialization on Unix-like systems. When invoked with the -h option to set a remote hostname, the utility performs hostname canonicalization before passing the result to PAM (Pluggable Authentication Modules) via the PAM_RHOST environment variable. The flaw (CWE-289: Authentication using Password with Weak Encryption) stems from improper canonicalization logic that modifies the supplied hostname in a way that diverges from the attacker's original input. Host-based PAM access control rules often rely on fully qualified domain names (FQDNs) for decision-making. An attacker who understands the canonicalization behavior can craft a hostname that, after transformation, matches an allowed FQDN in PAM rules when it should not, circumventing authentication policies. The CPE data indicates the vulnerability affects multiple versions of Red Hat Enterprise Linux (7, 8, 9, 10), Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4.

RemediationAI

Apply vendor-released patches from Red Hat for the affected util-linux package across all impacted RHEL versions (7, 8, 9, 10), Red Hat Hardened Images, and OpenShift Container Platform 4 installations. Consult https://access.redhat.com/security/cve/CVE-2026-3184 for version-specific patch availability and instructions. As a compensating control pending patching, restrict use of login(1) with the -h flag to trusted administrative contexts and review PAM configuration files (typically /etc/pam.d/) to identify rules that rely solely on hostname-based access decisions; implement additional authentication factors (such as certificate-based or multi-factor authentication) to reduce dependence on hostname canonicalization as a security boundary.

CVE-2026-4631 CRITICAL POC
9.8 Apr 07

Remote code execution in Cockpit's web interface allows unauthenticated attackers to execute arbitrary commands on the h

CVE-2026-4480 CRITICAL POC
9.0 May 26

Remote code execution in Samba's printing subsystem allows remote attackers to inject arbitrary shell commands via craft

CVE-2026-14544 CRITICAL
9.8 Jul 03

Remote code execution and privilege escalation in HPLIP (HP Linux Imaging and Printing) affects the hpcups print filter

CVE-2026-28369 CRITICAL
9.1 Mar 27

HTTP request smuggling in Undertow (the embedded web server underpinning JBoss EAP, Red Hat Data Grid, and Apache Camel

CVE-2026-28368 CRITICAL
9.1 Mar 27

HTTP request smuggling in Red Hat Undertow allows remote unauthenticated attackers to bypass front-end security controls

CVE-2026-33845 CRITICAL
9.1 Apr 30

Out-of-bounds read in the GnuTLS DTLS handshake reassembly logic lets remote unauthenticated attackers trigger an intege

CVE-2026-28367 CRITICAL
9.1 Mar 27

HTTP request smuggling in Undertow allows remote unauthenticated attackers to send `\r\r\r` as a header block terminator

CVE-2026-16526 HIGH
8.8 Jul 30

Local privilege escalation in Performance Co-Pilot (PCP) on Red Hat Enterprise Linux 6 through 10 and OpenShift Containe

CVE-2026-11610 HIGH
8.8 Jul 07

Denial of service in Red Hat / 389 Directory Server (389-ds-base, versions since ~1.3.2/2013) allows an authenticated LD

CVE-2026-14474 HIGH
8.8 Jul 07

Local-to-domain-wide root privilege escalation in SSSD's LDAP sudo provider allows an authenticated LDAP directory user

CVE-2026-52720 HIGH
8.8 Jun 15

Heap buffer overflow in GStreamer's librfb (RFB/VNC client) allows a malicious VNC server to corrupt heap memory on a co

CVE-2026-59851 HIGH
8.8 Jul 21

Privilege escalation via authentication bypass in libssh affects servers that enable GSSAPIKeyExchange, where the gssapi

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container bci/bci-base-fips:15.7-18.15 Container bci/bci-init:15.7-50.21 Container bci/bci-sle15-kernel-module-devel:15.7-57.21 Container bci/openjdk-devel:17.0.18.0-18.22 Container bci/openjdk-devel:21.0.10.0-22.22 Container bci/openjdk-devel:25.0.2.0-6.21 Container bci/ruby:2.5-23.20 Container bci/ruby:3.4-22.20 Container private-registry/1.2/harbor-registry:1.2.0-1.8 Container private-registry/1.2/harbor-registryctl:1.2.0-1.8 Container private-registry/harbor-registry:2.8.3-1.6 Container private-registry/harbor-registryctl:latest Container suse/kea:2.6-75.16 Container suse/kiosk/firefox-esr:140.9-71.23 Container suse/kiosk/pulseaudio:17.0-69.18 Container suse/kiosk/xorg-client:latest Container suse/kiosk/xorg:21.1-77.1 Container suse/mariadb:11.8.6-73.18 Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.3.8.18.1 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.3.9.16.1 Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:5.1.3.8.16.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.3.9.16.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.3.8.16.1 Container suse/postgres:16.13-85.20 Container suse/postgres:16.14 Container suse/postgres:17.10 Container suse/postgres:17.9-75.20 Container suse/postgres:18.3-65.20 Container suse/rmt-server:2.26-79.16 Container suse/sle15:15.7-5.17.21 Container third-party/amd/amdgpu-driver:sles-15.7-30.20.1 Container third-party/amd/amdgpu-driver:sles-15.7-30.30.3 Container third-party/amd/amdgpu-driver:sles-15.7-30.30.4 Container third-party/amd/amdgpu-driver:sles-15.7-31.10 Container third-party/amd/amdgpu-driver:sles-15.7-31.20 Container third-party/amd/amdgpu-driver:sles-15.7-31.30 Image proxy-httpd-image Image server-hub-xmlrpc-api-image Image server-image-sles15sp7 Image server-saline-image Affected
Container bci/php-apache:8.3.29-20.20 Container bci/python:3.11.15-82.11 Container bci/python:3.13.13-85.11 Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:5.1.3.8.16.1 Image proxy-salt-broker-image Image server-database-migration-image Affected
Container rancher/seedimage-builder:latest Image SLES-Azure-3P Image SLES-Azure-Basic Image SLES-Azure-Standard Image SLES-BYOS-Azure Image SLES-BYOS-EC2 Image SLES-BYOS-GCE Image SLES-CHOST-BYOS-Aliyun Image SLES-CHOST-BYOS-Azure Image SLES-CHOST-BYOS-EC2 Image SLES-CHOST-BYOS-GCE Image SLES-CHOST-BYOS-GDC Image SLES-CHOST-BYOS-SAP-CCloud Image SLES-EC2 Image SLES-EC2-ECS Image SLES-GCE Image SLES-GCE-3P Image SLES-Hardened-BYOS-Azure Image SLES-Hardened-BYOS-EC2 Image SLES-Hardened-BYOS-GCE Affected
Container suse/ltss/sle15.6/bci-base-fips:15.6-35.58 Container suse/ltss/sle15.6/sle15:15.6-5.48 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.8.7.35.3 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.8.7.37.3 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.8.6.35.1 Container suse/manager/5.0/x86_64/server:latest Affected
Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.8.7.35.1 Affected

Share

EUVD-2026-18817 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy