vulnerability
Amazon Linux 2023: CVE-2025-61729: Medium priority package update for cni-plugins (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Dec 2, 2025 | Jan 12, 2026 | Jan 12, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Dec 2, 2025
Added
Jan 12, 2026
Modified
Jan 12, 2026
Description
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
Solutions
amazon-linux-2023-upgrade-amazon-cloudwatch-agentamazon-linux-2023-upgrade-amazon-ecr-credential-helperamazon-linux-2023-upgrade-amazon-ssm-agentamazon-linux-2023-upgrade-captreeamazon-linux-2023-upgrade-captree-debuginfoamazon-linux-2023-upgrade-cni-pluginsamazon-linux-2023-upgrade-cni-plugins-debuginfoamazon-linux-2023-upgrade-cni-plugins-debugsourceamazon-linux-2023-upgrade-containerdamazon-linux-2023-upgrade-containerd-debuginfoamazon-linux-2023-upgrade-containerd-debugsourceamazon-linux-2023-upgrade-containerd-stressamazon-linux-2023-upgrade-containerd-stress-debuginfoamazon-linux-2023-upgrade-dockeramazon-linux-2023-upgrade-docker-debuginfoamazon-linux-2023-upgrade-docker-debugsourceamazon-linux-2023-upgrade-ecs-initamazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-testsamazon-linux-2023-upgrade-libcapamazon-linux-2023-upgrade-libcap-debuginfoamazon-linux-2023-upgrade-libcap-debugsourceamazon-linux-2023-upgrade-libcap-develamazon-linux-2023-upgrade-libcap-staticamazon-linux-2023-upgrade-nerdctlamazon-linux-2023-upgrade-oci-add-hooksamazon-linux-2023-upgrade-oci-add-hooks-debuginfoamazon-linux-2023-upgrade-oci-add-hooks-debugsourceamazon-linux-2023-upgrade-runfinch-finchamazon-linux-2023-upgrade-soci-snapshotter
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.