Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade podman-testsUpgrade libslirpUpgrade podman-dockerUpgrade crunUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade conmonUpgrade buildah-testsUpgrade podman-gvproxyUpgrade go-toolsetUpgrade golang-raceUpgrade python3-podmanUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade slirp4netnsUpgrade golang-github-cpuguy83-md2manUpgrade cockpit-podmanUpgrade golangUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade toolboxUpgrade golang-srcUpgrade git-lfsUpgrade criu-libsUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-workerUpgrade criuUpgrade delveUpgrade podman-catatonitUpgrade golang-binUpgrade golang-testsUpgrade python3-criuUpgrade podmanUpgrade buildahUpgrade container-selinuxUpgrade udicaUpgrade weldr-clientUpgrade criu-develUpgrade toolbox-testsUpgrade skopeo-testsUpgrade critUpgrade osbuild-composerUpgrade golang-docsUpgrade skopeoUpgrade podman-remoteUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade runcUpgrade containers-common | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golangUpgrade docker-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-raceUpgrade dockerUpgrade runcUpgrade containerd-debuginfoUpgrade containerdUpgrade runc-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade golist-debuginfoUpgrade containerd-stressUpgrade golang-shared | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golistUpgrade golang-miscUpgrade golang-docsUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade golang-raceUpgrade golang-sharedUpgrade golang-testsUpgrade golang-bin | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade golang-miscUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade osbuild-lvm2Upgrade slirp4netns-debuginfoUpgrade weldr-clientUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-coreUpgrade skopeoUpgrade osbuild-composer-tests-debuginfoUpgrade golangUpgrade osbuild-composer-core-debuginfoUpgrade delve-debuginfoUpgrade python3-osbuildUpgrade podman-pluginsUpgrade weldr-client-debuginfoUpgrade crun-debugsourceUpgrade containers-commonUpgrade criu-develUpgrade podman-remoteUpgrade git-lfsUpgrade grafanaUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade osbuildUpgrade git-lfs-debuginfoUpgrade container-selinuxUpgrade delveUpgrade criu-debugsourceUpgrade osbuild-selinuxUpgrade toolboxUpgrade cockpit-composerUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade golang-srcUpgrade osbuild-ostreeUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade podmanUpgrade podman-testsUpgrade golang-testsUpgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade runcUpgrade libslirpUpgrade buildah-testsUpgrade osbuild-luks2Upgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade git-lfs-debugsourceUpgrade conmon-debuginfoUpgrade weldr-client-debugsourceUpgrade grafana-debugsourceUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade fuse-overlayfsUpgrade conmonUpgrade critUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade go-toolsetUpgrade slirp4netnsUpgrade podman-dockerUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-docsUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade udicaUpgrade python3-criuUpgrade buildahUpgrade skopeo-debuginfoUpgrade criu-libs-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade netavarkUpgrade crunUpgrade skopeo-debugsourceUpgrade python3-podmanUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podman-catatonit | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade osbuild-selinuxUpgrade conmonUpgrade libslirp-develUpgrade cockpit-composerUpgrade libslirpUpgrade podman-testsUpgrade osbuild-ostreeUpgrade golang-testsUpgrade criu-develUpgrade skopeoUpgrade python3-podmanUpgrade osbuild-lvm2Upgrade podman-pluginsUpgrade skopeo-testsUpgrade golang-raceUpgrade osbuild-composer-dnf-jsonUpgrade criuUpgrade netavarkUpgrade udicaUpgrade podmanUpgrade crunUpgrade podman-catatonitUpgrade golang-github-cpuguy83-md2manUpgrade delveUpgrade slirp4netnsUpgrade weldr-clientUpgrade osbuild-composer-coreUpgrade golang-miscUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade python3-criuUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade runcUpgrade podman-remoteUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade critUpgrade osbuild-luks2Upgrade golangUpgrade containers-commonUpgrade osbuildUpgrade fuse-overlayfsUpgrade python3-osbuildUpgrade osbuild-composer-workerUpgrade criu-libsUpgrade buildah-testsUpgrade osbuild-composerUpgrade go-toolsetUpgrade podman-dockerUpgrade buildahUpgrade container-selinuxUpgrade golang-binUpgrade git-lfs | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade buildahUpgrade runcUpgrade skopeoUpgrade butaneUpgrade conmonUpgrade openshift-clientsUpgrade ignitionUpgrade podman | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade golangUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade osbuild-composer-debuginfoUpgrade buildahUpgrade runcUpgrade critUpgrade weldr-client-debugsourceUpgrade git-lfsUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade go-toolsetUpgrade golang-docsUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade podman-catatonitUpgrade python3-criuUpgrade conmonUpgrade golang-miscUpgrade criu-debuginfoUpgrade grafanaUpgrade crun-debuginfoUpgrade weldr-clientUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade criuUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade weldr-client-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade osbuild-luks2No solution existsUpgrade udicaUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-remoteUpgrade podman-pluginsUpgrade osbuildUpgrade golang-github-cpuguy83-md2manUpgrade python3-podmanUpgrade delveUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade cockpit-composerUpgrade osbuild-composerUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade osbuild-composer-coreUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade osbuild-ostreeUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade golang-srcUpgrade osbuild-lvm2Upgrade grafana-debugsourceUpgrade libslirp-develUpgrade crunUpgrade criu-develUpgrade git-lfs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade python3-osbuildUpgrade osbuild-composer-dnf-jsonUpgrade golang-raceUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade osbuild-composer-workerUpgrade libslirp-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfo | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade slirp4netnsUpgrade critUpgrade fuse-overlayfsUpgrade criuUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade runcUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-raceUpgrade skopeo-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade toolbox-testsUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade golangUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade golang-binUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade podman-remoteUpgrade skopeo-testsUpgrade skopeoUpgrade criu-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade python3-criuUpgrade netavarkUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runc-debugsource | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade firewalld-prometheus-configUpgrade go1.19-raceUpgrade wireUpgrade libisc1606-32bitUpgrade libirs1601-32bitUpgrade prometheus-blackbox_exporterUpgrade spacecmdUpgrade go1.18Upgrade libns1604-32bitUpgrade libdns1605-32bitUpgrade libisccfg1600Upgrade libdns1605Upgrade go1.18-opensslUpgrade libirs1601Upgrade go1.19-docUpgrade libisc1606Upgrade libns1604Upgrade libbind9-1600-32bitUpgrade python3-bindUpgrade golang-github-prometheus-node_exporterUpgrade libirs-develUpgrade go1.19Upgrade bind-devel-32bitUpgrade bind-chrootenvUpgrade go1.18-docUpgrade go1.18-raceUpgrade bindUpgrade dracut-saltbootUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade prometheus-postgres_exporterUpgrade bind-develUpgrade golang-github-prometheus-promuUpgrade bind-docUpgrade bind-utilsUpgrade libisccc1600-32bitUpgrade libbind9-1600Upgrade libisccfg1600-32bitUpgrade libisccc1600Upgrade golang-github-prometheus-prometheus | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.18-go | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub