The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade rclone-debuginfoUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade containerdUpgrade golistUpgrade amazon-ssm-agentUpgrade soci-snapshotterUpgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade golang-docsUpgrade containerd-debuginfoUpgrade cri-toolsUpgrade ecs-initUpgrade nerdctl-debuginfoUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade runfinch-finchUpgrade runcUpgrade oci-add-hooksUpgrade golang-binUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade golang-srcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golangUpgrade cni-pluginsUpgrade golang-testsUpgrade rcloneUpgrade docker | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debugsourceUpgrade containerd-debuginfoUpgrade golang-testsUpgrade containerd-debugsourceUpgrade dockerUpgrade soci-snapshotterUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooksUpgrade libcapUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade containerdUpgrade containerd-stress-debuginfoUpgrade captreeUpgrade golang-docsUpgrade golist-debugsourceUpgrade runcUpgrade runc-debuginfoUpgrade golang-sharedUpgrade libcap-debugsourceUpgrade libcap-develUpgrade golistUpgrade nerdctlUpgrade golang-miscUpgrade containerd-stressUpgrade cni-pluginsUpgrade libcap-staticUpgrade golangUpgrade oci-add-hooks-debuginfoUpgrade libcap-debuginfoUpgrade docker-debugsourceUpgrade runfinch-finchUpgrade runc-debugsourceUpgrade golist-debuginfoUpgrade captree-debuginfoUpgrade cni-plugins-debugsourceUpgrade docker-debuginfo | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.24-raceUpgrade go1.24-docUpgrade go1.25-docUpgrade go1.25-raceUpgrade go1.25Upgrade go1.24 | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub