When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade toolboxUpgrade netavarkUpgrade cockpit-podmanUpgrade skopeoUpgrade podman-catatonitUpgrade criuUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade podmanUpgrade python3-podmanUpgrade conmonUpgrade libslirpUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade buildah-testsUpgrade criu-libsUpgrade criu-develUpgrade podman-remoteUpgrade critUpgrade podman-testsUpgrade slirp4netnsUpgrade podman-dockerUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade crunUpgrade skopeo-testsUpgrade git-lfsUpgrade python3-criuUpgrade opentelemetry-collectorUpgrade runcUpgrade container-selinuxUpgrade podman-gvproxyUpgrade udica | Jul 7, 2026 | Jul 1, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade golang-sharedUpgrade rclone-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade oci-add-hooks-debuginfoUpgrade cni-pluginsUpgrade ecs-initUpgrade runcUpgrade nerdctlUpgrade golang-testsUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade cri-toolsUpgrade golist-debuginfoUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade golangUpgrade rcloneUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade golang-miscUpgrade containerd-debuginfoUpgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade docker-debuginfoUpgrade cri-tools-debuginfoUpgrade runc-debuginfoUpgrade golist | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade oci-add-hooks-debugsourceUpgrade golang-testsUpgrade rclone-debugsourceUpgrade yqUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade golang-binUpgrade runcUpgrade rclone-debuginfoUpgrade containerdUpgrade ecs-initUpgrade runc-debugsourceUpgrade golang-sharedUpgrade containerd-debugsourceUpgrade nerdctlUpgrade golist-debugsourceUpgrade dockerUpgrade yq-debugsourceUpgrade golist-debuginfoUpgrade golang-miscUpgrade amazon-ecr-credential-helperUpgrade docker-debugsourceUpgrade golang-srcUpgrade oci-add-hooks-debuginfoUpgrade docker-debuginfoUpgrade yq-debuginfoUpgrade soci-snapshotterUpgrade credentials-fetcherUpgrade rcloneUpgrade golangUpgrade containerd-stress-debuginfoUpgrade golistUpgrade runc-debuginfoUpgrade oci-add-hooks | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade go-toolsetUpgrade delveUpgrade golang-binUpgrade golang-raceUpgrade golang-tests | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade openshiftUpgrade cri-toolsUpgrade butaneUpgrade openshift-clients | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade netavarkUpgrade podman-catatonitUpgrade yggdrasil-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade rhc-worker-playbookUpgrade yggdrasil-debuginfoUpgrade yggdrasil-examples-debuginfoUpgrade buildahUpgrade criu-libs-debuginfoUpgrade image-builder-debugsourceUpgrade libslirp-debuginfoUpgrade golang-srcUpgrade podman-debuginfoUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade git-lfs-debuginfoUpgrade rhc-debugsourceUpgrade rhc-worker-scriptUpgrade slirp4netnsUpgrade toolbox-testsUpgrade ipp-usbUpgrade yggdrasil-develUpgrade opentelemetry-collectorUpgrade rhc-worker-playbook-debugsourceUpgrade fuse-overlayfsUpgrade golangUpgrade buildah-debuginfoUpgrade golang-testsUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade podman-dockerUpgrade python3-criuUpgrade cockpit-podmanUpgrade flightctl-cliUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade runc-debugsourceUpgrade go-toolsetNo solution existsUpgrade criuUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade rhc-worker-playbook-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade delve-debugsourceUpgrade criu-develUpgrade rhcUpgrade skopeoUpgrade conmonUpgrade toolbox-debuginfoUpgrade rhc-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade ipp-usb-debuginfoUpgrade image-builderUpgrade flightctl-servicesUpgrade flightctl-observabilityUpgrade crun-debugsourceUpgrade criu-libsUpgrade delveUpgrade python3-podmanUpgrade libslirp-develUpgrade flightctl-selinuxUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirpUpgrade containernetworking-pluginsUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade yggdrasilUpgrade flightctl-agentUpgrade crunUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade image-builder-debuginfoUpgrade buildah-debugsourceUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade toolboxUpgrade runc-debuginfoUpgrade runcUpgrade podman-debugsourceUpgrade container-selinuxUpgrade udicaUpgrade podman-catatonit-debuginfoUpgrade critUpgrade podman-testsUpgrade podman | Jul 3, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade ipp-usbUpgrade netavarkUpgrade git-lfs-debuginfoUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade buildah-testsUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade yggdrasil-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade yggdrasil-develUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade image-builderUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade image-builder-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade opentelemetry-collectorUpgrade podmanUpgrade toolbox-testsUpgrade buildahUpgrade podman-catatonitUpgrade criu-libsUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade conmonUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade yggdrasilUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade toolbox-debuginfoUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade criu-develUpgrade runcUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ipp-usb-debuginfoUpgrade podman-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade crunUpgrade critUpgrade delveUpgrade toolbox-debugsourceUpgrade image-builder-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade yggdrasil-debugsourceUpgrade git-lfs-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsource | Jul 7, 2026 | Jul 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub