Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade golang-srcUpgrade grafanaUpgrade toolboxUpgrade netavarkUpgrade osbuild-composer-coreUpgrade conmonUpgrade python3-podmanUpgrade golang-raceUpgrade libslirpUpgrade golang-github-cpuguy83-md2manUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade podman-dockerUpgrade crunUpgrade golang-miscUpgrade golangUpgrade criu-libsUpgrade git-lfsUpgrade cockpit-podmanUpgrade go-toolsetUpgrade podman-gvproxyUpgrade buildah-testsUpgrade slirp4netnsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade golang-docsUpgrade osbuild-composerUpgrade skopeoUpgrade osbuild-composer-dnf-jsonUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade weldr-clientUpgrade osbuild-composer-workerUpgrade golang-binUpgrade podman-remoteUpgrade podmanUpgrade python3-criuUpgrade skopeo-testsUpgrade critUpgrade criu-develUpgrade containers-commonUpgrade toolbox-testsUpgrade criuUpgrade buildahUpgrade runcUpgrade delveUpgrade container-selinuxUpgrade golang-testsUpgrade udica | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade dockerUpgrade golangUpgrade golistUpgrade golang-raceUpgrade golang-testsUpgrade docker-debuginfoUpgrade containerdUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade golist-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade runc-debuginfoUpgrade runcUpgrade containerd-stress | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golist-debugsourceUpgrade golang-raceUpgrade golang-testsUpgrade golang-sharedUpgrade golang-miscUpgrade golang-srcUpgrade golang-docsUpgrade golist-debuginfoUpgrade golistUpgrade golang | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade skopeo-testsUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade skopeoUpgrade weldr-client-debuginfoUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade python3-osbuildUpgrade containers-commonUpgrade osbuild-composer-core-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade golang-miscUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-coreUpgrade podmanUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade weldr-clientUpgrade osbuild-lvm2Upgrade slirp4netns-debugsourceUpgrade toolboxUpgrade golang-srcUpgrade grafanaUpgrade delve-debugsourceUpgrade cockpit-composerUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade golangUpgrade libslirp-develUpgrade git-lfsUpgrade osbuild-composer-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade osbuildUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade osbuild-selinuxUpgrade podman-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade osbuild-ostreeUpgrade python3-podmanUpgrade toolbox-testsUpgrade conmon-debugsourceUpgrade osbuild-composer-workerUpgrade osbuild-composer-debuginfoUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade slirp4netnsUpgrade podman-dockerUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade grafana-debuginfoUpgrade osbuild-luks2Upgrade golang-testsUpgrade cockpit-podmanUpgrade podman-testsUpgrade fuse-overlayfsUpgrade conmonUpgrade libslirp-debugsourceUpgrade udicaUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade criuUpgrade git-lfs-debugsourceUpgrade weldr-client-debugsourceUpgrade grafana-debugsourceUpgrade python3-criuUpgrade crunUpgrade buildahUpgrade weldr-client-tests-debuginfoUpgrade runcUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade libslirpUpgrade buildah-testsUpgrade critUpgrade podman-gvproxyUpgrade crun-debuginfo | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade osbuild-lvm2Upgrade osbuild-ostreeUpgrade podman-testsUpgrade conmonUpgrade podman-pluginsUpgrade golang-raceUpgrade criu-develUpgrade libslirpUpgrade skopeo-testsUpgrade python3-podmanUpgrade udicaUpgrade slirp4netnsUpgrade cockpit-composerUpgrade osbuild-composer-dnf-jsonUpgrade golang-testsUpgrade criuUpgrade libslirp-develUpgrade golang-github-cpuguy83-md2manUpgrade netavarkUpgrade delveUpgrade crunUpgrade osbuild-selinuxUpgrade podmanUpgrade skopeoUpgrade podman-catatonitUpgrade containers-commonUpgrade grafanaUpgrade go-toolsetUpgrade osbuild-luks2Upgrade osbuildUpgrade cockpit-podmanUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade golang-docsUpgrade git-lfsUpgrade golang-srcUpgrade buildah-testsUpgrade buildahUpgrade container-selinuxUpgrade osbuild-composer-workerUpgrade fuse-overlayfsUpgrade python3-osbuildUpgrade podman-dockerUpgrade osbuild-composerUpgrade golangUpgrade criu-libsUpgrade podman-remoteUpgrade osbuild-composer-coreUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade runcUpgrade podman-gvproxyUpgrade weldr-clientUpgrade python3-criuUpgrade golang-bin | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade podmanUpgrade butaneUpgrade ignitionUpgrade openshift-clientsUpgrade conmonUpgrade skopeoUpgrade runcUpgrade buildah | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade crunUpgrade criu-develUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-lvm2Upgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade osbuildUpgrade python3-podmanUpgrade golang-raceUpgrade osbuild-selinuxUpgrade toolboxUpgrade osbuild-composer-dnf-jsonUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade python3-osbuildUpgrade runc-debuginfoUpgrade runcUpgrade udicaUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade golang-docsUpgrade criuUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade critUpgrade weldr-client-debuginfoUpgrade libslirpNo solution existsUpgrade criu-debuginfoUpgrade osbuild-luks2Upgrade git-lfsUpgrade criu-libs-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade go-toolsetUpgrade git-lfs-debugsourceUpgrade buildah-testsUpgrade cockpit-podmanUpgrade weldr-client-debugsourceUpgrade crun-debuginfoUpgrade golangUpgrade conmon-debuginfoUpgrade buildahUpgrade python3-criuUpgrade podman-dockerUpgrade grafanaUpgrade podman-gvproxy-debuginfoUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade weldr-clientUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade grafana-debuginfoUpgrade golang-miscUpgrade podman-testsUpgrade osbuild-composer-debuginfoUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade osbuild-ostreeUpgrade libslirp-develUpgrade podman-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade golang-srcUpgrade golang-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade grafana-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composer-tests-debuginfo | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade crunUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade golang-raceUpgrade podman-debugsourceUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade libslirpUpgrade runcUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade critUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade crun-debuginfoUpgrade conmonUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade criu-develUpgrade podman-remoteUpgrade podman-pluginsUpgrade python3-criuUpgrade delveUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-testsUpgrade golang-binUpgrade podmanUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade criu-debugsourceUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade podman-debuginfoUpgrade netavarkUpgrade libslirp-debuginfo | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade spacecmdUpgrade wireUpgrade libisc1606Upgrade firewalld-prometheus-configUpgrade prometheus-blackbox_exporterUpgrade go1.18-opensslUpgrade libisccfg1600Upgrade libns1604Upgrade libisc1606-32bitUpgrade go1.19-docUpgrade go1.19-raceUpgrade libirs1601Upgrade go1.18Upgrade libns1604-32bitUpgrade libbind9-1600-32bitUpgrade python3-bindUpgrade golang-github-prometheus-node_exporterUpgrade libdns1605-32bitUpgrade libdns1605Upgrade libirs1601-32bitUpgrade bind-devel-32bitUpgrade bindUpgrade libbind9-1600Upgrade go1.18-docUpgrade dracut-saltbootUpgrade go1.18-openssl-docUpgrade libisccfg1600-32bitUpgrade bind-utilsUpgrade bind-chrootenvUpgrade go1.18-raceUpgrade golang-github-prometheus-prometheusUpgrade libisccc1600Upgrade prometheus-postgres_exporterUpgrade bind-develUpgrade libisccc1600-32bitUpgrade golang-github-prometheus-promuUpgrade go1.18-openssl-raceUpgrade bind-docUpgrade libirs-develUpgrade go1.19 | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.18 | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub