DHI-xf4q-rk6s-3dfj-w2nl
- Source
- https://scout.docker.com/v/DHI-xf4q-rk6s-3dfj-w2nl
- Import Source
- https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xf4q-rk6s-3dfj-w2nl.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DHI-xf4q-rk6s-3dfj-w2nl
- Upstream
- CVE-2026-78667
- Published
- 2026-11-10T22:10:05Z
- Modified
- 2026-11-10T22:15:03Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS)…
- Details
-
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.
- References
-
- https://scout.docker.com/v/DHI-xf4q-rk6s-3dfj-w2nl
- https://nvd.nist.gov/vuln/detail/CVE-2026-78667
- https://errata.almalinux.org/9/ALSA-2026-86196.html
- https://access.redhat.com/errata/RHSA-2026:86196
- https://errata.almalinux.org/8/ALSA-2026-86203.html
- https://access.redhat.com/errata/RHSA-2026:86203
- https://errata.almalinux.org/8/ALSA-2026-88188.html
- https://access.redhat.com/errata/RHSA-2026:88188
- https://errata.almalinux.org/9/ALSA-2026-89744.html
- https://access.redhat.com/errata/RHSA-2026:89744
- https://errata.almalinux.org/8/ALSA-2026-89760.html
- https://access.redhat.com/errata/RHSA-2026:89760
- https://errata.almalinux.org/9/ALSA-2026-90362.html
- https://access.redhat.com/errata/RHSA-2026:90362
- https://errata.almalinux.org/9/ALSA-2026-90424.html
- https://access.redhat.com/errata/RHSA-2026:90424
- https://errata.almalinux.org/9/ALSA-2026-90462.html
- https://access.redhat.com/errata/RHSA-2026:90462
- https://errata.almalinux.org/9/ALSA-2026-93617.html
- https://access.redhat.com/errata/RHSA-2026:93617
- https://security.alpinelinux.org/vuln/CVE-2026-78667
- https://alas.aws.amazon.com/AL2/ALAS-2026-4005.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97032
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97030
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94448
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94447
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94444
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94439
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78663
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78660
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78659
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56866
- https://alas.aws.amazon.com/AL2/ALAS-2026-4017.html
- https://alas.aws.amazon.com/AL2/ALAS-2026-4042.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3225.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3254.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3255.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3256.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3257.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3258.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3266.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93320
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92543
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92542
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81870
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78662
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61801
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56855
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3270.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3271.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3272.html
- https://alas.aws.amazon.com/AL2023/ALAS-2026-3322.html
- https://security-tracker.debian.org/tracker/CVE-2026-78667
- https://pkg.go.dev/vuln/GO-2026-6609
- https://linux.oracle.com/cve/ELSA-2026-86093.html
- https://linux.oracle.com/errata/ELSA-2026-86093.html
- https://linux.oracle.com/cve/ELSA-2026-86196.html
- https://linux.oracle.com/errata/ELSA-2026-86196.html
- https://linux.oracle.com/cve/ELSA-2026-86203.html
- https://linux.oracle.com/errata/ELSA-2026-86203.html
- https://linux.oracle.com/cve/ELSA-2026-88188.html
- https://linux.oracle.com/errata/ELSA-2026-88188.html
- https://linux.oracle.com/cve/ELSA-2026-88262.html
- https://linux.oracle.com/errata/ELSA-2026-88262.html
- https://linux.oracle.com/cve/ELSA-2026-88280.html
- https://linux.oracle.com/errata/ELSA-2026-88280.html
- https://linux.oracle.com/cve/ELSA-2026-88336.html
- https://linux.oracle.com/errata/ELSA-2026-88336.html
- https://linux.oracle.com/cve/ELSA-2026-89744.html
- https://linux.oracle.com/errata/ELSA-2026-89744.html
- https://linux.oracle.com/cve/ELSA-2026-89751.html
- https://linux.oracle.com/errata/ELSA-2026-89751.html
- https://linux.oracle.com/cve/ELSA-2026-89752.html
- https://linux.oracle.com/errata/ELSA-2026-89752.html
- https://linux.oracle.com/cve/ELSA-2026-89760.html
- https://linux.oracle.com/errata/ELSA-2026-89760.html
- https://linux.oracle.com/cve/ELSA-2026-89761.html
- https://linux.oracle.com/errata/ELSA-2026-89761.html
- https://linux.oracle.com/cve/ELSA-2026-90362.html
- https://linux.oracle.com/errata/ELSA-2026-90362.html
- https://linux.oracle.com/cve/ELSA-2026-90424.html
- https://linux.oracle.com/errata/ELSA-2026-90424.html
- https://linux.oracle.com/cve/ELSA-2026-90462.html
- https://linux.oracle.com/errata/ELSA-2026-90462.html
- https://linux.oracle.com/cve/ELSA-2026-95519.html
- https://linux.oracle.com/errata/ELSA-2026-95519.html
- https://access.redhat.com/security/cve/CVE-2026-78667
- https://errata.rockylinux.org/RLSA-2026:86093
- https://errata.rockylinux.org/RLSA-2026:86196
- https://errata.rockylinux.org/RLSA-2026:86203
- https://errata.rockylinux.org/RLSA-2026:88188
- https://errata.rockylinux.org/RLSA-2026:88262
- https://errata.rockylinux.org/RLSA-2026:88280
- https://errata.rockylinux.org/RLSA-2026:88336
- https://errata.rockylinux.org/RLSA-2026:89744
- https://errata.rockylinux.org/RLSA-2026:89752
- https://errata.rockylinux.org/RLSA-2026:89760
- https://errata.rockylinux.org/RLSA-2026:89761
- https://errata.rockylinux.org/RLSA-2026:90362
- https://errata.rockylinux.org/RLSA-2026:90424
- https://errata.rockylinux.org/RLSA-2026:90462
- https://errata.rockylinux.org/RLSA-2026:93596
- https://errata.rockylinux.org/RLSA-2026:93617
- https://errata.rockylinux.org/RLSA-2026:95519
- https://ubuntu.com/security/CVE-2026-78667
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-78667
- https://github.com/golang/go/issues/81858
Affected packages
Docker Hardened Images:Alpine:3.23
tailscale-dev
Package
- Name
- tailscale-dev
- Purl
- pkg:apk/dhi/tailscale-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips-dev
Package
- Name
- tailscale-fips-dev
- Purl
- pkg:apk/dhi/tailscale-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips
Package
- Name
- tailscale-fips
- Purl
- pkg:apk/dhi/tailscale-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-dev
Package
- Name
- tailscale-k8s-nameserver-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips-dev
Package
- Name
- tailscale-k8s-nameserver-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips
Package
- Name
- tailscale-k8s-nameserver-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver
Package
- Name
- tailscale-k8s-nameserver
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-dev
Package
- Name
- tailscale-k8s-operator-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips-dev
Package
- Name
- tailscale-k8s-operator-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips
Package
- Name
- tailscale-k8s-operator-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator
Package
- Name
- tailscale-k8s-operator
- Purl
- pkg:apk/dhi/tailscale-k8s-operator
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale
Package
- Name
- tailscale
- Purl
- pkg:apk/dhi/tailscale
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1