A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade podman-remoteUpgrade python3-criuUpgrade skopeo-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade containers-commonUpgrade buildahUpgrade podmanUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade skopeoUpgrade runcUpgrade toolboxUpgrade podman-catatonitUpgrade podman-testsUpgrade crunUpgrade cockpit-podmanUpgrade podman-dockerUpgrade libslirpUpgrade udicaUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade criu-develUpgrade podman-pluginsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade criuUpgrade python3-podmanUpgrade conmonUpgrade buildah-testsUpgrade netavark | Mar 4, 2026 | Feb 26, 2026 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade ecs-initUpgrade amazon-ecr-credential-helper | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ecs-initUpgrade amazon-ecr-credential-helper | Jan 12, 2026 | Dec 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kata-containers | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade containers-commonUpgrade libslirp-develUpgrade crunUpgrade container-selinuxUpgrade cockpit-podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-testsUpgrade python3-criuUpgrade libslirpUpgrade slirp4netnsUpgrade skopeo-testsUpgrade podmanUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade udicaUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildah-testsUpgrade netavarkUpgrade skopeoUpgrade criuUpgrade critUpgrade runcUpgrade python3-podmanUpgrade podman-docker | Mar 2, 2026 | Dec 4, 2025 |
| Redhat Openshift | — | Upgrade kernelUpgrade microshiftUpgrade python-eventletUpgrade kernel-rtUpgrade openshiftUpgrade runc | Aug 10, 2026 | Dec 4, 2025 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade buildahUpgrade skopeo-debuginfoUpgrade containers-commonUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade osbuild-composer-coreUpgrade podman-gvproxyUpgrade containernetworking-pluginsNo solution existsUpgrade criu-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade aardvark-dnsUpgrade buildah-testsUpgrade osbuild-composer-tests-debuginfoUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade python3-criuUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade cockpit-podmanUpgrade osbuild-composerUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade criu-libsUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade skopeoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debugsourceUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade runc-debuginfoUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-debuginfoUpgrade runcUpgrade buildah-debugsourceUpgrade podman-testsUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade criu-develUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade toolboxUpgrade osbuild-composer-debugsourceUpgrade toolbox-debugsourceUpgrade osbuild-composer-worker | Jan 15, 2026 | Dec 4, 2025 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade libslirp-develUpgrade python3-criuUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade podman-debuginfoUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade criu-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade critUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade toolboxUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade criuUpgrade netavarkUpgrade podman-testsUpgrade slirp4netnsUpgrade toolbox-testsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade libslirpUpgrade containers-commonUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade skopeoUpgrade podman-gvproxyUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade conmonUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsource | Mar 2, 2026 | Feb 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub