Go lib spdystream <0.5.1 OOM via SPDY frame parsing
CVE-2026-35469 Published on April 16, 2026

SpdyStream: DOS on CRI
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

NVD

Vulnerability Analysis

CVE-2026-35469 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

Allocation of Resources Without Limits or Throttling

The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.


Products Associated with CVE-2026-35469

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Acm
 
Red Hat Advanced Cluster Security
 
Red Hat Container Native Virtualization
 
Red Hat Openshift
 
Red Hat Multicluster Engine
 
Red Hat Cert Manager
 
Red Hat Dynamic Accelerator Slicer
 
Red Hat Edge Manager
 
Red Hat Windows Machine Config
 
Red Hat Openshift Gitops
 
Red Hat External Secrets Operator
 
Red Hat Lvms
 
Red Hat Openshift Data Foundation
 
Red Hat Openshift Distributed Tracing
 
Red Hat Zero Trust Workload Identity Manager
 

Affected Versions

moby spdystream: Red Hat Advanced Cluster Management for Kubernetes 2.13: Red Hat Advanced Cluster Security for Kubernetes 4.10: Red Hat Advanced Cluster Security for Kubernetes 4.8: Red Hat Advanced Cluster Security for Kubernetes 4.9: Red Hat Container Native Virtualization 4.16: Red Hat Container Native Virtualization 4.17: Red Hat Container Native Virtualization 4.19: Red Hat Container Native Virtualization 4.20: Red Hat Container Native Virtualization 4.21: Red Hat Container Native Virtualization 4.22: Red Hat OpenShift Container Platform 4.12: Red Hat OpenShift Container Platform 4.13: Red Hat OpenShift Container Platform 4.14: Red Hat OpenShift Container Platform 4.15: Red Hat OpenShift Container Platform 4.16: Red Hat OpenShift Container Platform 4.17: Red Hat OpenShift Container Platform 4.18: Red Hat OpenShift Container Platform 4.19: Red Hat OpenShift Container Platform 4.20: Red Hat OpenShift Container Platform 4.21: Red Hat OpenShift Container Platform 4.22: Red Hat multicluster engine for Kubernetes 2.10: Red Hat multicluster engine for Kubernetes 2.11: Red Hat multicluster engine for Kubernetes 2.8: cert-manager Operator for Red Hat OpenShift: Dynamic Accelerator Slicer Operator for Red Hat OpenShift: Red Hat Multicluster Engine for Kubernetes: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Edge Manager 1: Red Hat OpenShift Container Platform 4: Red Hat OpenShift for Windows Containers: Red Hat OpenShift GitOps: Red Hat OpenShift Virtualization 4: External Secrets Operator for Red Hat OpenShift: Red Hat Logical Volume Manager Storage: Red Hat Advanced Cluster Security 4: Red Hat Openshift Data Foundation 4: Red Hat OpenShift distributed tracing 3: Red Hat Zero Trust Workload Identity Manager:

Exploit Probability

EPSS
0.43%
Percentile
34.22%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.