An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade runfinch-finchUpgrade nerdctlUpgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade containerd-debuginfo | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agentUpgrade rcloneUpgrade amazon-cloudwatch-agentUpgrade runfinch-finchUpgrade rclone-debuginfoUpgrade containerd-debugsourceUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade rclone-debugsourceUpgrade containerdUpgrade nerdctlUpgrade containerd-stress-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Redhat Openshift | — | Upgrade openshift | Aug 17, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade flightctl-agentUpgrade podman-dockerUpgrade flightctl-servicesUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade flightctl-observabilityUpgrade flightctl-cliUpgrade podman-testsUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade podman-tests-debuginfoNo solution existsUpgrade podmanUpgrade flightctl-selinux | Jul 17, 2026 | May 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub