Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opentelemetry-collectorUpgrade podman-testsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade udicaUpgrade podman-gvproxyUpgrade podmanUpgrade skopeo-testsUpgrade slirp4netnsUpgrade python3-criuUpgrade runcUpgrade criuUpgrade container-selinuxUpgrade buildah-testsUpgrade podman-dockerUpgrade skopeoUpgrade criu-develUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade podman-remoteUpgrade critUpgrade crunUpgrade containernetworking-pluginsUpgrade netavarkUpgrade python3-podmanUpgrade libslirp-develUpgrade containers-commonUpgrade fuse-overlayfsUpgrade libslirpUpgrade toolboxUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade buildahUpgrade conmon | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade soci-snapshotterUpgrade runcUpgrade containerd-stressUpgrade containerdUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-testsUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade runfinch-finchUpgrade golang-docsUpgrade dockerUpgrade docker-debuginfoUpgrade nerdctlUpgrade golang-binUpgrade oci-add-hooksUpgrade golistUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golangUpgrade golang-srcUpgrade ecs-initUpgrade golang-miscUpgrade nerdctl-debuginfoUpgrade amazon-ecr-credential-helper-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade rcloneUpgrade oci-add-hooksUpgrade golang-docsUpgrade runc-debuginfoUpgrade runcUpgrade containerdUpgrade golang-sharedUpgrade dockerUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golistUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade oci-add-hooks-debugsourceUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade soci-snapshotterUpgrade amazon-ecr-credential-helperUpgrade golist-debugsourceUpgrade nerdctlUpgrade containerd-stressUpgrade credentials-fetcherUpgrade rclone-debuginfoUpgrade ecs-initUpgrade golangUpgrade rclone-debugsourceUpgrade runc-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade golist-debuginfoUpgrade docker-debugsource | May 4, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade buildahUpgrade conmon-debugsourceUpgrade podman-gvproxyUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade osbuild-composer-worker-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade podman-catatonitUpgrade host-meteringUpgrade flightctl-servicesUpgrade yggdrasil-debugsourceUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade golang-testsUpgrade slirp4netns-debuginfoUpgrade runcUpgrade grafana-debugsourceUpgrade toolboxUpgrade criuUpgrade libslirp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade grafana-selinuxUpgrade golang-binUpgrade toolbox-debugsourceUpgrade golang-docsUpgrade host-metering-debugsourceUpgrade osbuild-composerUpgrade osbuild-composer-workerUpgrade podman-tests-debuginfoUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade skopeoUpgrade go-fdo-client-debuginfoUpgrade slirp4netnsNo solution existsUpgrade ipp-usbUpgrade yggdrasil-debuginfoUpgrade python3-criuUpgrade crunUpgrade podman-dockerUpgrade grafana-pcp-debugsourceUpgrade ipp-usb-debuginfoUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade go-fdo-server-rendezvousUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade go-fdo-clientUpgrade fuse-overlayfsUpgrade go-fdo-server-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade yggdrasil-examples-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade critUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade image-builder-debugsourceUpgrade host-metering-selinuxUpgrade flightctl-selinuxUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade go-fdo-serverUpgrade golang-srcUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade image-builder-debuginfoUpgrade podman-debugsourceUpgrade go-fdo-client-debugsourceUpgrade delve-debuginfoUpgrade git-lfs-debugsourceUpgrade git-lfs-debuginfoUpgrade rhcUpgrade rhc-debuginfoUpgrade grafana-pcpUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade python3-podmanUpgrade host-metering-debuginfoUpgrade git-lfsUpgrade flightctl-observabilityUpgrade crun-debugsourceUpgrade criu-libsUpgrade go-fdo-server-ownerUpgrade slirp4netns-debugsourceUpgrade rhc-develUpgrade grafanaUpgrade criu-develUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade go-fdo-server-debuginfoUpgrade podman-pluginsUpgrade golang-miscUpgrade golang-raceUpgrade runc-debuginfoUpgrade rhc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade flightctl-cliUpgrade flightctl-agentUpgrade osbuild-composer-core-debuginfoUpgrade go-toolsetUpgrade osbuild-composer-tests-debuginfoUpgrade container-selinuxUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golangUpgrade go-fdo-server-manufacturerUpgrade yggdrasil-develUpgrade opentelemetry-collectorUpgrade yggdrasilUpgrade skopeo-testsUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade image-builderUpgrade osbuild-composer-coreUpgrade fuse-overlayfs-debugsource | May 20, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade go-fdo-client-debugsourceUpgrade yggdrasil-debuginfoUpgrade osbuild-composer-coreUpgrade toolboxUpgrade libslirpUpgrade podman-tests-debuginfoUpgrade runc-debuginfoUpgrade criu-develUpgrade fuse-overlayfsUpgrade go-fdo-server-debugsourceUpgrade netavarkUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade go-fdo-server-debuginfoUpgrade buildah-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-debuginfoUpgrade delveUpgrade osbuild-composer-debugsourceUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podman-testsUpgrade toolbox-testsUpgrade conmon-debugsourceUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade image-builder-debugsourceUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade image-builder-debuginfoUpgrade go-fdo-client-debuginfoUpgrade criu-debugsourceUpgrade podman-remoteUpgrade runc-debugsourceUpgrade libslirp-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade yggdrasilUpgrade delve-debuginfoUpgrade yggdrasil-develUpgrade yggdrasil-debugsourceUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade opentelemetry-collectorUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade go-fdo-clientUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade aardvark-dnsUpgrade libslirp-develUpgrade image-builderUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade osbuild-composerUpgrade libslirp-debugsourceUpgrade go-fdo-serverUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade containers-commonUpgrade podmanUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-workerUpgrade runcUpgrade python3-criu | Jun 1, 2026 | May 28, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.13 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub