The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cni-pluginsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade rcloneUpgrade runcUpgrade golangUpgrade cri-tools-debuginfoUpgrade golang-testsUpgrade dockerUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade containerdUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade golistUpgrade golang-docsUpgrade soci-snapshotterUpgrade docker-debuginfoUpgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade amazon-ssm-agentUpgrade runc-debuginfoUpgrade containerd-stressUpgrade cri-toolsUpgrade ecs-initUpgrade cni-plugins-debuginfoUpgrade golang-shared | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golist-debugsourceUpgrade containerdUpgrade runcUpgrade containerd-debugsourceUpgrade amazon-ssm-agentUpgrade amazon-cloudwatch-agentUpgrade soci-snapshotterUpgrade oci-add-hooks-debugsourceUpgrade amazon-ecr-credential-helperUpgrade containerd-debuginfoUpgrade captreeUpgrade containerd-stress-debuginfoUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golang-srcUpgrade cni-plugins-debuginfoUpgrade golang-testsUpgrade oci-add-hooksUpgrade dockerUpgrade libcapUpgrade golang-binUpgrade cni-plugins-debugsourceUpgrade nerdctlUpgrade golang-miscUpgrade captree-debuginfoUpgrade libcap-develUpgrade golist-debuginfoUpgrade docker-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade containerd-stressUpgrade cni-pluginsUpgrade libcap-staticUpgrade golistUpgrade docker-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade libcap-debuginfoUpgrade runfinch-finchUpgrade libcap-debugsource | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.24Upgrade go1.25-raceUpgrade go1.25Upgrade go1.24-raceUpgrade go1.24-docUpgrade go1.25-doc | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub