Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade weldr-clientUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade osbuild-composerUpgrade podman-remoteUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade golang-binUpgrade criu-develUpgrade buildahUpgrade python3-criuUpgrade skopeoUpgrade osbuild-composer-dnf-jsonUpgrade criuUpgrade toolbox-testsUpgrade critUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade skopeo-testsUpgrade podmanUpgrade delveUpgrade udicaUpgrade runcUpgrade golang-miscUpgrade conmonUpgrade toolboxUpgrade slirp4netnsUpgrade grafanaUpgrade buildah-testsUpgrade netavarkUpgrade golang-raceUpgrade criu-libsUpgrade podman-testsUpgrade libslirpUpgrade crunUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade git-lfsUpgrade golang-srcUpgrade podman-pluginsUpgrade golangUpgrade go-toolsetUpgrade osbuild-composer-coreUpgrade golang-github-cpuguy83-md2manUpgrade podman-gvproxyUpgrade libslirp-develUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podman | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade golangUpgrade golang-testsUpgrade golistUpgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade golang-docsUpgrade runcUpgrade golang-binUpgrade runc-debuginfoUpgrade golang-sharedUpgrade containerdUpgrade golist-debuginfoUpgrade containerd-stress | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade golistUpgrade golist-debuginfoUpgrade golang-docsUpgrade golang-miscUpgrade golang | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade runc-debuginfoUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade aardvark-dnsUpgrade weldr-client-debuginfoUpgrade python3-osbuildUpgrade containernetworking-pluginsUpgrade podmanUpgrade osbuild-composer-coreUpgrade osbuild-composer-tests-debuginfoUpgrade criu-libsUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade git-lfsUpgrade golangUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade golang-miscUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade weldr-clientUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade osbuild-lvm2Upgrade criu-develUpgrade podman-remoteUpgrade cockpit-composerUpgrade delveUpgrade git-lfs-debuginfoUpgrade containers-commonUpgrade osbuild-composerUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade osbuild-ostreeUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade osbuild-selinuxUpgrade osbuild-composer-dnf-jsonUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade osbuildUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade criu-debugsourceUpgrade golang-srcUpgrade weldr-client-debugsourceUpgrade podman-dockerUpgrade slirp4netnsUpgrade osbuild-composer-worker-debuginfoUpgrade golang-docsUpgrade go-toolsetUpgrade criu-libs-debuginfoUpgrade criuUpgrade git-lfs-debugsourceUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade osbuild-composer-debuginfoUpgrade buildah-debuginfoUpgrade critUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade runcUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade crunUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade podman-gvproxy-debuginfoUpgrade grafana-debuginfoUpgrade osbuild-luks2Upgrade golang-testsUpgrade conmon-debugsourceUpgrade python3-podmanUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-catatonitUpgrade libslirpUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade buildahUpgrade udicaUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade podman-testsUpgrade conmonUpgrade grafana-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade netavark | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go118Upgrade go119 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade criu-libsUpgrade git-lfsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade runcUpgrade osbuild-composer-coreUpgrade python3-criuUpgrade weldr-clientUpgrade podman-gvproxyUpgrade golang-miscUpgrade cockpit-podmanUpgrade golang-binUpgrade golang-docsUpgrade osbuild-luks2Upgrade golangUpgrade osbuildUpgrade containers-commonUpgrade grafanaUpgrade buildahUpgrade buildah-testsUpgrade osbuild-composerUpgrade podman-dockerUpgrade go-toolsetUpgrade container-selinuxUpgrade python3-osbuildUpgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade golang-srcUpgrade critUpgrade osbuild-lvm2Upgrade golang-testsUpgrade cockpit-composerUpgrade libslirp-develUpgrade libslirpUpgrade udicaUpgrade golang-raceUpgrade conmonUpgrade podman-testsUpgrade netavarkUpgrade crunUpgrade podmanUpgrade golang-github-cpuguy83-md2manUpgrade delveUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-selinuxUpgrade skopeo-testsUpgrade python3-podmanUpgrade podman-pluginsUpgrade criu-develUpgrade osbuild-ostreeUpgrade slirp4netnsUpgrade podman-catatonitUpgrade criuUpgrade skopeo | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade conmonUpgrade podmanUpgrade ignitionUpgrade openshift-clientsUpgrade skopeoUpgrade butaneUpgrade buildahUpgrade runc | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade delveUpgrade osbuild-composer-dnf-jsonUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composerUpgrade podman-catatonit-debuginfoUpgrade cockpit-composerUpgrade oci-seccomp-bpf-hookUpgrade osbuild-ostreeUpgrade criu-libsUpgrade delve-debuginfoUpgrade container-selinuxUpgrade libslirp-develUpgrade osbuild-composer-core-debuginfoUpgrade grafana-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade podmanUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade git-lfs-debuginfoUpgrade python3-osbuildUpgrade toolboxUpgrade osbuild-composer-coreUpgrade podman-debuginfoUpgrade podman-remoteUpgrade osbuild-lvm2Upgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade golang-raceUpgrade netavarkUpgrade osbuildUpgrade osbuild-selinuxUpgrade skopeoUpgrade osbuild-composer-tests-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-binUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade osbuild-composer-workerUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade weldr-client-debugsourceUpgrade osbuild-composer-debuginfoUpgrade libslirpUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade golang-miscUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade golang-docsUpgrade cockpit-podmanUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade toolbox-debugsourceUpgrade podman-gvproxyUpgrade conmonUpgrade python3-criuUpgrade weldr-clientUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade critUpgrade osbuild-composer-worker-debuginfoUpgrade criu-libs-debuginfoUpgrade grafanaUpgrade weldr-client-debuginfoUpgrade podman-dockerUpgrade osbuild-luks2Upgrade criu-debuginfoNo solution existsUpgrade criuUpgrade buildah-tests-debuginfoUpgrade go-toolsetUpgrade podman-catatonitUpgrade buildahUpgrade udicaUpgrade git-lfsUpgrade runcUpgrade conmon-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade golangUpgrade grafana-debuginfoUpgrade buildah-testsUpgrade git-lfs-debugsource | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade containers-commonUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade runc-debugsourceUpgrade delve-debugsourceUpgrade criu-develUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade libslirp-develUpgrade podmanUpgrade golang-binUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade slirp4netnsUpgrade critUpgrade libslirpUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade criu-libs-debuginfoUpgrade buildahUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade skopeo-debugsourceUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsource | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade libdns1605Upgrade libdns1605-32bitUpgrade go1.18-opensslUpgrade python3-bindUpgrade go1.19-raceUpgrade libbind9-1600-32bitUpgrade golang-github-prometheus-node_exporterUpgrade libisc1606Upgrade libisc1606-32bitUpgrade libirs1601-32bitUpgrade prometheus-blackbox_exporterUpgrade wireUpgrade spacecmdUpgrade go1.18Upgrade go1.19-docUpgrade libisccfg1600Upgrade firewalld-prometheus-configUpgrade libirs1601Upgrade libns1604-32bitUpgrade libns1604Upgrade go1.18-docUpgrade libirs-develUpgrade bind-chrootenvUpgrade go1.18-raceUpgrade go1.19Upgrade bind-develUpgrade prometheus-postgres_exporterUpgrade libisccc1600-32bitUpgrade bind-docUpgrade golang-github-prometheus-prometheusUpgrade libisccfg1600-32bitUpgrade libisccc1600Upgrade libbind9-1600Upgrade bindUpgrade bind-utilsUpgrade golang-github-prometheus-promuUpgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade bind-devel-32bitUpgrade dracut-saltboot | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.18 | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub