CVE-2026-4324
Fixed in a distro release EPSS <1%CVSS 5.4
A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.
Products: Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat Satellite 6.19 for RHEL 9, Red Hat Satellite 6
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | katello | 4.19.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-cli | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-debug | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-dynflow-sidekiq | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-ec2 | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-journald | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-libvirt | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-openstack | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-ovirt | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-pcp | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-postgresql | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-redis | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-service | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-telemetry | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-vmware | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.17 | python-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite 6.17 | python-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite 6.17 | python3.11-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite 6.17 | rubygem-fog-kubevirt | 0:1.5.1-1.el9sat |
| Red Hat satellite 6.17 | rubygem-foreman_kubevirt | 0:0.4.3-1.el9sat |
| Red Hat satellite 6.17 | rubygem-katello | 0:4.16.0.14-1.el9sat |
| Red Hat satellite 6.17 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-cli | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-common | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-obsolete-packages | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | yggdrasil-worker-forwarder | 0:0.0.3-4.el9sat |
| Red Hat satellite 6.18 | foreman | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-cli | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-debug | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-dynflow-sidekiq | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-ec2 | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-journald | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-libvirt | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-openstack | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-pcp | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-postgresql | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-redis | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-service | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-telemetry | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | foreman-vmware | 0:3.16.0.12-1.el9sat |
| Red Hat satellite 6.18 | rubygem-foreman_kubevirt | 0:0.4.3-1.el9sat |
| Red Hat satellite 6.18 | rubygem-katello | 0:4.18.0.9-1.el9sat |
| Red Hat satellite 6.18 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite 6.18 | yggdrasil-worker-forwarder | 0:0.0.3-4.el9sat |
| Red Hat satellite 6.19 | dynflow-utils | 0:2.0.1-1.el9sat |
| Red Hat satellite 6.19 | rubygem-katello | 0:4.20.0.4-1.el9sat |
| Red Hat satellite capsule 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | foreman-debug | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | foreman-pcp | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite capsule 6.17 | python-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite capsule 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite capsule 6.17 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-capsule | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-common | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-obsolete-packages | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.18 | foreman | 0:3.16.0.12-1.el9sat |
| Red Hat satellite capsule 6.18 | foreman-debug | 0:3.16.0.12-1.el9sat |
| Red Hat satellite capsule 6.18 | foreman-pcp | 0:3.16.0.12-1.el9sat |
| Red Hat satellite capsule 6.18 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite capsule 6.19 | dynflow-utils | 0:2.0.1-1.el9sat |
| Red Hat satellite maintenance 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite utils 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite utils 6.17 | foreman-cli | 0:3.14.0.14-1.el9sat |
| Red Hat satellite utils 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite utils 6.17 | satellite-cli | 0:6.17.7-1.el9sat |
| Red Hat satellite utils 6.18 | foreman | 0:3.16.0.12-1.el9sat |
| Red Hat satellite utils 6.18 | foreman-cli | 0:3.16.0.12-1.el9sat |