Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade golang-binUpgrade fuse-overlayfsUpgrade golang-miscUpgrade golang-srcUpgrade buildah-testsUpgrade opentelemetry-collectorUpgrade golangUpgrade cockpit-podmanUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade netavarkUpgrade podman-remoteUpgrade podman-dockerUpgrade criuUpgrade grafana-pcpUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade go-toolsetUpgrade python3-podmanUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade golang-testsUpgrade buildahUpgrade toolboxUpgrade golang-docsUpgrade podman-pluginsUpgrade podmanUpgrade runcUpgrade python3-criuUpgrade udicaUpgrade crunUpgrade conmonUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade image-builderUpgrade git-lfsUpgrade skopeoUpgrade libslirpUpgrade grafanaUpgrade containers-commonUpgrade criu-libsUpgrade osbuild-composer-workerUpgrade critUpgrade golang-raceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade podman-testsUpgrade skopeo-testsUpgrade delveUpgrade criu-devel | Jan 26, 2026 | Jan 21, 2026 |
| Alpine Linux | — | Upgrade dockerUpgrade goUpgrade rclone | Dec 3, 2025 | Dec 2, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade cri-tools-debuginfoUpgrade golang-binUpgrade golang-testsUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-srcUpgrade dockerUpgrade runcUpgrade golang-github-cpuguy83-go-md2manUpgrade cni-pluginsUpgrade oci-add-hooks-debuginfoUpgrade containerd-debuginfoUpgrade amazon-ecr-credential-helperUpgrade docker-debuginfoUpgrade golistUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade soci-snapshotterUpgrade ecs-initUpgrade oci-add-hooksUpgrade cri-toolsUpgrade golang-docsUpgrade containerdUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade nerdctl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-burntsushi-toml-test-develUpgrade runfinch-finchUpgrade cni-plugins-debugsourceUpgrade docker-debugsourceUpgrade cni-pluginsUpgrade libcap-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-github-burntsushi-tomlUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade libcap-debuginfoUpgrade amazon-ssm-agentUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade golang-github-burntsushi-toml-develUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade containerd-stressUpgrade nerdctlUpgrade captree-debuginfoUpgrade ecs-initUpgrade golang-github-burntsushi-toml-debugsourceUpgrade amazon-cloudwatch-agentUpgrade containerdUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade runc-debugsourceUpgrade cni-plugins-debuginfoUpgrade runcUpgrade golang-docsUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golangUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade libcap-develUpgrade golang-srcUpgrade golang-github-burntsushi-toml-testUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade captreeUpgrade golang-binUpgrade soci-snapshotterUpgrade golang-github-cpuguy83-md2man-develUpgrade oci-add-hooksUpgrade libcap-staticUpgrade oci-add-hooks-debugsourceUpgrade dockerUpgrade libcapUpgrade golang-testsUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang-github-cpuguy83-md2man-debuginfo | Jan 12, 2026 | Dec 2, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Freebsd | — | Upgrade go125Upgrade oauth2-proxyUpgrade go124 | Dec 10, 2025 | Dec 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade crunUpgrade podman-gvproxyUpgrade python3-podmanUpgrade golang-srcUpgrade criu-libsUpgrade podman-pluginsUpgrade criuUpgrade golang-raceUpgrade libslirpUpgrade podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade golang-miscUpgrade golangUpgrade skopeoUpgrade fuse-overlayfsUpgrade criu-develUpgrade libslirp-develUpgrade podman-catatonitUpgrade golang-testsUpgrade netavarkUpgrade conmonUpgrade osbuild-composer-coreUpgrade podman-testsUpgrade buildahUpgrade containernetworking-pluginsUpgrade image-builderUpgrade golang-docsUpgrade podman-remoteUpgrade grafana-pcpUpgrade grafanaUpgrade go-toolsetUpgrade ipp-usbUpgrade osbuild-composerUpgrade critUpgrade yggdrasilUpgrade git-lfsUpgrade delveUpgrade buildah-testsUpgrade python3-criuUpgrade grafana-selinuxUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade runcUpgrade containers-commonUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade yggdrasil-develUpgrade udicaUpgrade golang-bin | Jan 23, 2026 | Dec 2, 2025 |
| Redhat Openshift | — | Upgrade containernetworking-pluginsUpgrade podmanUpgrade runcUpgrade skopeo | Aug 10, 2026 | Dec 2, 2025 |
| Redhat_linux | — | Upgrade podman-plugins-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade yggdrasil-develUpgrade runc-debuginfoUpgrade criu-develUpgrade buildah-debugsourceUpgrade delveUpgrade butaneUpgrade delve-debugsourceUpgrade podmanUpgrade delve-debuginfoUpgrade rhc-develUpgrade podman-pluginsUpgrade golang-raceUpgrade toolbox-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade libslirp-develUpgrade flightctl-agentUpgrade crunUpgrade rhc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade grafana-selinuxUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade yggdrasilUpgrade podman-catatonit-debuginfoUpgrade grafana-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade container-selinuxUpgrade grafana-pcpUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade image-builderUpgrade gvisor-tap-vsock-debugsourceUpgrade containers-commonUpgrade osbuild-composer-tests-debuginfoUpgrade golang-binUpgrade rhc-debuginfoUpgrade toolboxUpgrade osbuild-composer-workerUpgrade flightctl-cliUpgrade rhcUpgrade osbuild-composer-coreUpgrade yggdrasil-debugsourceUpgrade ipp-usb-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade image-builder-debuginfoUpgrade flightctl-selinuxUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debugsourceUpgrade criu-libsUpgrade flightctl-observabilityUpgrade osbuild-composerUpgrade rhc-worker-playbookUpgrade grafanaUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade yggdrasil-debuginfoUpgrade golang-docsUpgrade grafana-pcp-debuginfoUpgrade podman-dockerUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade yggdrasil-examples-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golang-testsUpgrade go-toolsetUpgrade golangUpgrade fuse-overlayfsUpgrade butane-debugsourceUpgrade grafana-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade grafana-pcp-debugsourceUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade flightctl-servicesUpgrade criuUpgrade udicaUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade rhc-worker-playbook-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade butane-debuginfoUpgrade cockpit-podmanUpgrade osbuild-composer-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade osbuild-composer-debugsourceUpgrade gvisor-tap-vsockUpgrade golang-miscUpgrade buildahUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade netavarkUpgrade conmon-debugsourceUpgrade ipp-usbNo solution existsUpgrade podman-gvproxyUpgrade opentelemetry-collectorUpgrade criu-debuginfoUpgrade podman-testsUpgrade conmonUpgrade libslirpUpgrade rhc-worker-playbook-debuginfoUpgrade critUpgrade podman-tests-debuginfoUpgrade git-lfs-debugsource | Jan 22, 2026 | Dec 2, 2025 |
| Rocky_linux | — | Upgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade grafana-selinuxUpgrade libslirp-develUpgrade grafana-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade image-builder-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade podmanUpgrade skopeo-debuginfoUpgrade git-lfs-debugsourceUpgrade osbuild-composer-debugsourceUpgrade buildah-debugsourceUpgrade golang-raceUpgrade criu-libs-debuginfoUpgrade delveUpgrade crun-debuginfoUpgrade libslirpUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-testsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade skopeoUpgrade criu-develUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade ipp-usb-debuginfoUpgrade crunUpgrade libslirp-debugsourceUpgrade podman-gvproxyUpgrade podman-testsUpgrade osbuild-composer-workerUpgrade yggdrasilUpgrade git-lfsUpgrade podman-remoteUpgrade podman-catatonitUpgrade netavarkUpgrade fuse-overlayfsUpgrade containers-commonUpgrade golangUpgrade crun-debugsourceUpgrade grafana-debuginfoUpgrade grafanaUpgrade criu-debuginfoUpgrade opentelemetry-collectorUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade yggdrasil-develUpgrade libslirp-debuginfoUpgrade image-builder-debugsourceUpgrade grafana-pcpUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade conmon-debuginfoUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade osbuild-composerUpgrade golang-binUpgrade criuUpgrade yggdrasil-debugsourceUpgrade yggdrasil-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade ipp-usbUpgrade toolbox-testsUpgrade image-builderUpgrade buildah-debuginfoUpgrade osbuild-composer-coreUpgrade grafana-pcp-debuginfoUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade git-lfs-debuginfoUpgrade buildahUpgrade python3-criuUpgrade grafana-pcp-debugsource | Jan 26, 2026 | Jan 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 2, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub