During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade python3-criuUpgrade cockpit-podmanUpgrade podman-remoteUpgrade conmonUpgrade golang-docsUpgrade critUpgrade toolbox-testsUpgrade container-selinuxUpgrade runcUpgrade delveUpgrade podman-pluginsUpgrade buildah-testsUpgrade podman-testsUpgrade criuUpgrade skopeo-testsUpgrade libslirpUpgrade udicaUpgrade toolboxUpgrade golang-binUpgrade golang-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podmanUpgrade podman-dockerUpgrade crunUpgrade podman-catatonitUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade buildahUpgrade osbuild-composer-coreUpgrade opentelemetry-collectorUpgrade criu-libsUpgrade golang-srcUpgrade python3-podmanUpgrade golang-miscUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade grafana-selinuxUpgrade skopeoUpgrade libslirp-develUpgrade netavarkUpgrade containers-commonUpgrade osbuild-composerUpgrade golangUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade aardvark-dnsUpgrade grafanaUpgrade containernetworking-plugins | May 7, 2026 | May 6, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooksUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade golang-testsUpgrade dockerUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade golang-srcUpgrade containerd-debuginfoUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade containerdUpgrade nerdctlUpgrade runc-debuginfoUpgrade containerd-stressUpgrade golang-docsUpgrade runcUpgrade oci-add-hooks-debuginfoUpgrade golistUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-shared | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-sharedUpgrade golang-binUpgrade containerd-debugsourceUpgrade nerdctlUpgrade golist-debuginfoUpgrade golang-docsUpgrade runcUpgrade containerd-stressUpgrade ecs-initUpgrade yq-debugsourceUpgrade credentials-fetcherUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade runc-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang-github-burntsushi-tomlUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golistUpgrade golang-github-burntsushi-toml-testUpgrade runc-debugsourceUpgrade golang-miscUpgrade soci-snapshotterUpgrade docker-debugsourceUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade dockerUpgrade yqUpgrade golang-github-burntsushi-toml-develUpgrade yq-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golist-debugsourceUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade oci-add-hooksUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golang-testsUpgrade docker-debuginfo | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade git-lfsUpgrade grafanaUpgrade go-toolsetUpgrade golang-docsUpgrade golang-raceUpgrade delveUpgrade golang-binUpgrade grafana-selinuxUpgrade grafana-pcpUpgrade golang-tests | Apr 27, 2026 | Apr 8, 2026 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade ignitionUpgrade cri-oUpgrade ose-aws-ecr-image-credential-providerUpgrade podmanUpgrade butaneUpgrade skopeoUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade openshiftUpgrade runc | Aug 10, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade golangUpgrade image-builder-debugsourceUpgrade opentelemetry-collectorUpgrade containers-commonUpgrade osbuild-composer-core-debuginfoUpgrade aardvark-dnsUpgrade git-lfs-debugsourceUpgrade go-fdo-client-debugsourceUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade gvisor-tap-vsockUpgrade criu-debugsourceUpgrade flightctl-selinuxUpgrade podman-remote-debuginfoUpgrade host-metering-selinuxUpgrade golang-miscUpgrade buildah-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade osbuild-composerUpgrade criu-debuginfoUpgrade buildahUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade go-fdo-server-manufacturerUpgrade go-toolsetUpgrade grafanaUpgrade rhc-debugsourceUpgrade golang-srcUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade go-fdo-server-ownerUpgrade grafana-pcpUpgrade git-lfsUpgrade gvisor-tap-vsock-gvforwarderUpgrade delve-debuginfoUpgrade rhc-worker-playbookUpgrade fuse-overlayfs-debuginfoUpgrade image-builderUpgrade libslirp-develUpgrade runc-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade git-lfs-debuginfoUpgrade image-builder-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade rhc-develUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade yggdrasil-develUpgrade flightctl-observabilityUpgrade osbuild-composer-dnf-jsonUpgrade rhcUpgrade python3-podmanUpgrade flightctl-cliUpgrade golang-raceUpgrade osbuild-composer-debuginfoUpgrade ipp-usbUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade skopeo-testsUpgrade osbuild-composer-worker-debuginfoUpgrade grafana-selinuxUpgrade grafana-pcp-debuginfoUpgrade podman-pluginsUpgrade podmanUpgrade host-metering-debuginfoUpgrade golang-testsUpgrade slirp4netnsUpgrade runcUpgrade osbuild-composer-workerUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade ipp-usb-debuginfoUpgrade toolbox-testsUpgrade podman-catatonitUpgrade conmon-debuginfoUpgrade yggdrasilUpgrade go-fdo-server-rendezvousUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade rhc-worker-scriptUpgrade podman-debuginfoUpgrade buildah-testsUpgrade rhc-worker-playbook-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-debugsourceUpgrade go-fdo-server-debugsourceUpgrade udicaUpgrade criuUpgrade conmonUpgrade toolboxUpgrade python3-criuUpgrade rhc-debuginfoUpgrade libslirpUpgrade yggdrasil-examples-debuginfoUpgrade grafana-debugsourceUpgrade libslirp-debugsourceUpgrade go-fdo-serverUpgrade cockpit-podmanUpgrade podman-dockerUpgrade criu-develUpgrade yggdrasil-debuginfoUpgrade skopeoUpgrade podman-testsUpgrade grafana-pcp-debugsourceUpgrade go-fdo-server-debuginfoUpgrade go-fdo-clientUpgrade podman-catatonit-debuginfoUpgrade podman-tests-debuginfoUpgrade host-meteringUpgrade delveUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade yggdrasil-debugsourceUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade go-fdo-client-debuginfoUpgrade flightctl-servicesUpgrade delve-debugsourceUpgrade osbuild-composer-debugsourceUpgrade critNo solution existsUpgrade host-metering-debugsourceUpgrade golang-docsUpgrade crun | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade image-builder-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade grafana-pcpUpgrade grafana-debugsourceUpgrade podman-debugsourceUpgrade skopeoUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade delveUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade grafanaUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade golang-binUpgrade osbuild-composerUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade toolboxUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade image-builder-debuginfoUpgrade image-builderUpgrade podmanUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade podman-remoteUpgrade criu-develUpgrade fuse-overlayfs-debugsourceUpgrade delve-debuginfoUpgrade yggdrasilUpgrade yggdrasil-debugsourceUpgrade yggdrasil-develUpgrade runc-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-pluginsUpgrade osbuild-composer-coreUpgrade go-fdo-client-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-fdo-server-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade delve-debugsourceUpgrade git-lfsUpgrade python3-criuUpgrade go-fdo-serverUpgrade ipp-usb-debuginfoUpgrade slirp4netnsUpgrade osbuild-composer-debuginfoUpgrade go-fdo-server-debugsourceUpgrade podman-testsUpgrade critUpgrade buildahUpgrade conmon-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runcUpgrade grafana-pcp-debuginfoUpgrade go-fdo-client-debugsourceUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade osbuild-composer-workerUpgrade osbuild-composer-debugsourceUpgrade conmonUpgrade grafana-debuginfoUpgrade go-toolsetUpgrade go-fdo-clientUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade crunUpgrade criuUpgrade golang-raceUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade netavarkUpgrade ipp-usbUpgrade toolbox-testsUpgrade podman-tests-debuginfoUpgrade grafana-pcp-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade opentelemetry-collectorUpgrade libslirpUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade yggdrasil-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade golang | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.9 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub