archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade slirp4netnsUpgrade container-selinuxUpgrade python3-criuUpgrade grafanaUpgrade go-toolsetUpgrade criuUpgrade podman-dockerUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade osbuild-composerUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade podman-testsUpgrade golang-docsUpgrade runcUpgrade criu-libsUpgrade podman-pluginsUpgrade delveUpgrade grafana-selinuxUpgrade skopeo-testsUpgrade golang-raceUpgrade golang-srcUpgrade buildah-testsUpgrade libslirpUpgrade golangUpgrade golang-miscUpgrade podman-catatonitUpgrade buildahUpgrade osbuild-composer-coreUpgrade podman-remoteUpgrade crit | Feb 17, 2026 | Feb 16, 2026 |
| Alpine Linux | — | Upgrade opentofuUpgrade go | Jan 29, 2026 | Jan 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade golang-github-cpuguy83-go-md2manUpgrade oci-add-hooksUpgrade golangUpgrade golist-debuginfoUpgrade golistUpgrade amazon-ecr-credential-helper-debuginfoUpgrade nerdctl-debuginfoUpgrade cri-toolsUpgrade soci-snapshotterUpgrade dockerUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade golang-binUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade runcUpgrade containerd-debuginfoUpgrade cri-tools-debuginfoUpgrade ecs-initUpgrade golang-docsUpgrade golang-sharedUpgrade cni-plugins | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2manUpgrade containerd-stressUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-binUpgrade golang-github-burntsushi-toml-test-develUpgrade golangUpgrade golang-github-burntsushi-toml-testUpgrade dockerUpgrade oci-add-hooks-debugsourceUpgrade runcUpgrade containerd-debugsourceUpgrade soci-snapshotterUpgrade captreeUpgrade libcapUpgrade git-lfs-debuginfoUpgrade golist-debugsourceUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade libcap-staticUpgrade runc-debugsourceUpgrade golang-github-burntsushi-toml-develUpgrade containerdUpgrade oci-add-hooksUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade runfinch-finchUpgrade nerdctlUpgrade golistUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade amazon-ecr-credential-helperUpgrade libcap-debugsourceUpgrade runc-debuginfoUpgrade containerd-stress-debuginfoUpgrade captree-debuginfoUpgrade golang-srcUpgrade libcap-debuginfoUpgrade git-lfs-debugsourceUpgrade golang-github-burntsushi-tomlUpgrade git-lfsUpgrade golang-github-burntsushi-toml-debuginfoUpgrade cni-pluginsUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade docker-debuginfoUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade docker-debugsourceUpgrade amazon-cloudwatch-agentUpgrade golang-github-burntsushi-toml-debugsourceUpgrade libcap-develUpgrade cni-plugins-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade cni-plugins-debugsourceUpgrade golist-debuginfo | Feb 10, 2026 | Jan 28, 2026 |
| Oracle_linux | — | Upgrade criu-develUpgrade golang-testsUpgrade netavarkUpgrade python3-podmanUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade criu-libsUpgrade golang-binUpgrade criuUpgrade golang-raceUpgrade podman-remoteUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade crunUpgrade libslirp-develUpgrade containers-commonUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade conmonUpgrade cockpit-podmanUpgrade grafana-selinuxUpgrade container-selinuxUpgrade podman-gvproxyUpgrade golang-srcUpgrade podmanUpgrade libslirpUpgrade grafanaUpgrade golang-miscUpgrade osbuild-composerUpgrade podman-testsUpgrade osbuild-composer-workerUpgrade aardvark-dnsUpgrade delveUpgrade osbuild-composer-coreUpgrade python3-criuUpgrade udicaUpgrade podman-dockerUpgrade golang-docsUpgrade go-toolsetUpgrade buildah-testsUpgrade buildahUpgrade critUpgrade slirp4netnsUpgrade golangUpgrade runc | Feb 24, 2026 | Jan 28, 2026 |
| Redhat Openshift | — | Upgrade podman | Aug 10, 2026 | Jan 28, 2026 |
| Redhat_linux | — | Upgrade libslirpUpgrade grafanaUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-selinuxUpgrade skopeoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-debugsourceUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade containers-commonUpgrade runcUpgrade crun-debuginfoUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade osbuild-composer-worker-debuginfoUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade critUpgrade toolboxUpgrade delveUpgrade go-toolsetUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade grafana-debugsourceUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade buildah-testsUpgrade osbuild-composerUpgrade runc-debugsourceUpgrade podman-dockerUpgrade conmon-debuginfoNo solution existsUpgrade podmanUpgrade podman-debuginfoUpgrade podman-remoteUpgrade cockpit-podmanUpgrade golang-raceUpgrade fuse-overlayfsUpgrade grafana-debuginfoUpgrade golang-binUpgrade criu-debuginfoUpgrade python3-podmanUpgrade netavarkUpgrade golang-srcUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-coreUpgrade buildah-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade delve-debuginfoUpgrade toolbox-debugsourceUpgrade podman-gvproxyUpgrade osbuild-composer-tests-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade golangUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade podman-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-miscUpgrade golang-testsUpgrade criu | Feb 17, 2026 | Jan 28, 2026 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-workerUpgrade runcUpgrade buildah-testsUpgrade osbuild-composerUpgrade crun-debuginfoUpgrade crunUpgrade criuUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade podman-tests-debuginfoUpgrade osbuild-composer-coreUpgrade golang-raceUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade golangUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade osbuild-composer-core-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-selinuxUpgrade golang-binUpgrade delve-debuginfoUpgrade conmonUpgrade conmon-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade delveUpgrade slirp4netnsUpgrade python3-criuUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-testsUpgrade podman-remoteUpgrade grafana-debugsourceUpgrade libslirp | Feb 19, 2026 | Feb 17, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub