Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osbuild-composer-workerUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade critUpgrade grafana-selinuxUpgrade golang-raceUpgrade python3-criuUpgrade podmanUpgrade libslirpUpgrade conmonUpgrade toolboxUpgrade udicaUpgrade golang-docsUpgrade criu-develUpgrade podman-pluginsUpgrade runcUpgrade containers-commonUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade container-selinuxUpgrade git-lfsUpgrade delveUpgrade criu-libsUpgrade libslirp-develUpgrade skopeoUpgrade grafanaUpgrade image-builderUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-remoteUpgrade golang-binUpgrade netavarkUpgrade go-toolsetUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade golang-miscUpgrade golang-srcUpgrade buildahUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade cockpit-podmanUpgrade golang-testsUpgrade golangUpgrade criuUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade grafana-pcpUpgrade opentelemetry-collectorUpgrade buildah-tests | Jan 26, 2026 | Jan 21, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade goUpgrade docker | Dec 3, 2025 | Dec 2, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade runfinch-finchUpgrade golang-github-cpuguy83-go-md2manUpgrade golang-srcUpgrade cni-pluginsUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-binUpgrade runcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade oci-add-hooksUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade cni-plugins-debuginfoUpgrade cri-toolsUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade soci-snapshotterUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade golistUpgrade containerd-stressUpgrade containerdUpgrade golang-shared | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade captreeUpgrade golang-github-cpuguy83-md2man-develUpgrade dockerUpgrade containerd-stress-debuginfoUpgrade golang-miscUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade libcap-develUpgrade golang-srcUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade libcapUpgrade oci-add-hooks-debugsourceUpgrade golang-testsUpgrade libcap-staticUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang-github-burntsushi-toml-testUpgrade golangUpgrade golang-github-cpuguy83-md2manUpgrade oci-add-hooksUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade cni-pluginsUpgrade runcUpgrade libcap-debuginfoUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade containerdUpgrade runc-debuginfoUpgrade runfinch-finchUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-burntsushi-tomlUpgrade golang-github-burntsushi-toml-debugsourceUpgrade cni-plugins-debuginfoUpgrade docker-debugsourceUpgrade cni-plugins-debugsourceUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade libcap-debugsourceUpgrade golang-sharedUpgrade golang-docsUpgrade oci-add-hooks-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade amazon-ssm-agentUpgrade docker-debuginfoUpgrade golang-github-burntsushi-toml-develUpgrade containerd-debuginfoUpgrade runc-debugsourceUpgrade ecs-initUpgrade containerd-stressUpgrade captree-debuginfo | Jan 12, 2026 | Dec 2, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Freebsd | — | Upgrade oauth2-proxyUpgrade go124Upgrade go125 | Dec 10, 2025 | Dec 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade ipp-usbUpgrade grafana-pcpUpgrade osbuild-composerUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade grafana-selinuxUpgrade yggdrasil-develUpgrade golang-docsUpgrade golang-binUpgrade aardvark-dnsUpgrade udicaUpgrade buildahUpgrade containers-commonUpgrade container-selinuxUpgrade yggdrasilUpgrade git-lfsUpgrade delveUpgrade buildah-testsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade critUpgrade osbuild-composer-workerUpgrade image-builderUpgrade podman-remoteUpgrade runcUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade criu-develUpgrade crunUpgrade criu-libsUpgrade podmanUpgrade libslirpUpgrade criuUpgrade skopeoUpgrade python3-podmanUpgrade conmonUpgrade golang-testsUpgrade podman-dockerUpgrade netavarkUpgrade podman-testsUpgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade podman-gvproxyUpgrade golang-miscUpgrade libslirp-develUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade fuse-overlayfs | Jan 23, 2026 | Dec 2, 2025 |
| Redhat Openshift | — | Upgrade podmanUpgrade runcUpgrade skopeoUpgrade containernetworking-plugins | Aug 10, 2026 | Dec 2, 2025 |
| Redhat_linux | — | Upgrade osbuild-composer-dnf-jsonUpgrade podman-remoteUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade flightctl-observabilityUpgrade podman-remote-debuginfoUpgrade git-lfsUpgrade toolboxUpgrade git-lfs-debuginfoUpgrade rhc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade image-builder-debuginfoUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade grafanaUpgrade golang-srcUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade image-builder-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-coreUpgrade rhc-debugsourceUpgrade delveUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade podmanUpgrade delve-debuginfoUpgrade criu-develUpgrade golang-raceUpgrade delve-debugsourceUpgrade libslirp-debugsourceUpgrade osbuild-composerUpgrade butaneUpgrade crunUpgrade podman-debugsourceUpgrade libslirp-develUpgrade rhc-worker-playbookUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade rhc-develUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade image-builderUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade flightctl-selinuxUpgrade runc-debuginfoUpgrade yggdrasil-develUpgrade fuse-overlayfs-debuginfoUpgrade podman-plugins-debuginfoUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade grafana-debugsourceUpgrade grafana-selinuxUpgrade yggdrasil-debugsourceUpgrade grafana-pcpUpgrade osbuild-composer-workerUpgrade flightctl-agentUpgrade ipp-usb-debuginfoUpgrade yggdrasilUpgrade toolbox-debuginfoUpgrade rhcUpgrade flightctl-cliUpgrade toolbox-testsUpgrade python3-criuUpgrade aardvark-dnsUpgrade grafana-pcp-debuginfoUpgrade slirp4netnsNo solution existsUpgrade buildah-debuginfoUpgrade golangUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade skopeo-debugsourceUpgrade critUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade netavarkUpgrade ipp-usbUpgrade yggdrasil-examples-debuginfoUpgrade flightctl-servicesUpgrade criuUpgrade gvisor-tap-vsockUpgrade yggdrasil-debuginfoUpgrade golang-miscUpgrade crun-debuginfoUpgrade buildahUpgrade conmon-debugsourceUpgrade osbuild-composer-debugsourceUpgrade criu-libs-debuginfoUpgrade git-lfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade podman-tests-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade runcUpgrade grafana-debuginfoUpgrade butane-debugsourceUpgrade skopeo-debuginfoUpgrade grafana-pcp-debugsourceUpgrade conmonUpgrade podman-gvproxyUpgrade golang-testsUpgrade libslirpUpgrade rhc-worker-playbook-debuginfoUpgrade runc-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-catatonitUpgrade butane-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade golang-docsUpgrade udicaUpgrade criu-debuginfoUpgrade opentelemetry-collectorUpgrade podman-tests | Jan 22, 2026 | Dec 2, 2025 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade osbuild-composer-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade conmonUpgrade grafana-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-selinuxUpgrade runc-debuginfoUpgrade yggdrasilUpgrade runcUpgrade skopeoUpgrade skopeo-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade slirp4netnsUpgrade criu-develUpgrade osbuild-composer-workerUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade golang-raceUpgrade delve-debugsourceUpgrade podman-gvproxyUpgrade podman-testsUpgrade libslirpUpgrade podmanUpgrade slirp4netns-debugsourceUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade crunUpgrade ipp-usb-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade criu-libsUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade go-toolsetUpgrade git-lfs-debuginfoUpgrade buildahUpgrade opentelemetry-collectorUpgrade grafana-pcp-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade criu-debugsourceUpgrade python3-criuUpgrade golangUpgrade netavarkUpgrade grafana-debuginfoUpgrade grafanaUpgrade git-lfsUpgrade containers-commonUpgrade podman-remoteUpgrade podman-catatonitUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composerUpgrade ipp-usbUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade image-builder-debuginfoUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade criuUpgrade yggdrasil-debugsourceUpgrade yggdrasil-debuginfoUpgrade aardvark-dnsUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade libslirp-debuginfoUpgrade image-builder-debugsourceUpgrade yggdrasil-develUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade osbuild-composer-coreUpgrade image-builderUpgrade grafana-pcp-debuginfoUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-tests-debuginfo | Jan 26, 2026 | Jan 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub