This vulnerability arises from an unchecked type assertion in claircore's RPM package scanner used by Red Hat Advanced Cluster Security 4. When specially crafted RPM header data is processed in a container layer, it causes a panic in the scanner that is not recovered, leading to a crash of the Clair indexer process. This crash results in a denial of service by terminating the indexing functionality. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a low impact on availability and no impact on confidentiality or integrity. Red Hat's advisory recommends mitigation strategies such as running scanner workloads in isolated processes or containers and deploying multiple indexer replicas behind a load balancer to minimize the blast radius of a crash. No patch or official fix has been announced yet.

The vulnerability causes a denial of service by crashing the Clair indexer process when processing malicious RPM header data. There is no impact on confidentiality or integrity. The availability impact is low, as the crash affects the indexing service but can be mitigated by architectural measures. There are no known exploits in the wild.

Red Hat advises configuring the indexer to run scanner workloads in isolated processes or containers to prevent a single scanner panic from terminating the shared indexer. Alternatively, deploying multiple indexer replicas behind a load balancer can reduce the impact of a single process crash. No official patch or fix is currently available; patch status is not yet confirmed — check the vendor advisory for updates.