DHI-5qos-62xl-deqq-pphf
- Source
- https://scout.docker.com/v/DHI-5qos-62xl-deqq-pphf
- Import Source
- https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DHI-5qos-62xl-deqq-pphf
- Upstream
- Published
- 2026-11-10T22:09:09Z
- Modified
- 2026-11-10T22:15:02Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able…
- Details
-
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection.
- References
-
- https://scout.docker.com/v/DHI-5qos-62xl-deqq-pphf
- https://nvd.nist.gov/vuln/detail/CVE-2026-78662
- https://pkg.go.dev/vuln/GO-2026-6354
- https://groups.google.com/g/golang-announce/c/1y3fb2np35U
- https://go.dev/issue/81316
- https://go.dev/cl/826504
- https://alas.aws.amazon.com/AL2/ALAS-2026-3969.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78662
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56855
- https://alas.aws.amazon.com/AL2/ALAS-2026-4018.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78663
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78659
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3129.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88046
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88044
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88018
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88017
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88016
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88015
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88014
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88013
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79783
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79782
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79781
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79780
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79779
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79778
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79777
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79776
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79775
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71313
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59732
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56854
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46603
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42505
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3140.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75593
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61712
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61711
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47262
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15793
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15792
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15791
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15789
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3160.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3266.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93320
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92543
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92542
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81870
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61801
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3273.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95837
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53493
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3274.html
- https://security-tracker.debian.org/tracker/CVE-2026-78662
- https://ubuntu.com/security/CVE-2026-78662
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-78662
Affected packages
Docker Hardened Images:Alpine:3.23
tailscale-dev
Package
- Name
- tailscale-dev
- Purl
- pkg:apk/dhi/tailscale-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips-dev
Package
- Name
- tailscale-fips-dev
- Purl
- pkg:apk/dhi/tailscale-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips
Package
- Name
- tailscale-fips
- Purl
- pkg:apk/dhi/tailscale-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-dev
Package
- Name
- tailscale-k8s-nameserver-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips-dev
Package
- Name
- tailscale-k8s-nameserver-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips
Package
- Name
- tailscale-k8s-nameserver-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver
Package
- Name
- tailscale-k8s-nameserver
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-dev
Package
- Name
- tailscale-k8s-operator-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips-dev
Package
- Name
- tailscale-k8s-operator-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips
Package
- Name
- tailscale-k8s-operator-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator
Package
- Name
- tailscale-k8s-operator
- Purl
- pkg:apk/dhi/tailscale-k8s-operator
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale
Package
- Name
- tailscale
- Purl
- pkg:apk/dhi/tailscale
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1