Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade cockpit-podmanUpgrade buildah-testsUpgrade golang-miscUpgrade grafanaUpgrade criu-libsUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade libslirpUpgrade netavarkUpgrade conmonUpgrade golang-srcUpgrade golang-raceUpgrade golang-github-cpuguy83-md2manUpgrade python3-podmanUpgrade podman-testsUpgrade podman-dockerUpgrade git-lfsUpgrade go-toolsetUpgrade podman-pluginsUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade golangUpgrade toolboxUpgrade udicaUpgrade containers-commonUpgrade osbuild-composer-dnf-jsonUpgrade weldr-clientUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade criu-develUpgrade toolbox-testsUpgrade skopeo-testsUpgrade critUpgrade podman-catatonitUpgrade buildahUpgrade skopeoUpgrade golang-binUpgrade osbuild-composer-workerUpgrade podmanUpgrade delveUpgrade python3-criuUpgrade podman-remoteUpgrade criuUpgrade runcUpgrade osbuild-composerUpgrade golang-docsUpgrade aardvark-dns | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade dockerUpgrade golang-raceUpgrade docker-debuginfoUpgrade golang-testsUpgrade golistUpgrade runcUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-docsUpgrade containerd-stressUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade containerdUpgrade golang-bin | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golist-debugsourceUpgrade golang-miscUpgrade golangUpgrade golist-debuginfoUpgrade golistUpgrade golang-docsUpgrade golang-src | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade weldr-client-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade toolboxUpgrade criu-debuginfoUpgrade osbuild-lvm2Upgrade criu-develUpgrade weldr-clientUpgrade osbuild-composer-dnf-jsonUpgrade osbuildUpgrade python3-osbuildUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-coreUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade podman-debuginfoUpgrade podmanUpgrade osbuild-selinuxUpgrade podman-remote-debuginfoUpgrade golang-srcUpgrade osbuild-ostreeUpgrade container-selinuxUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golangUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade git-lfsUpgrade golang-miscUpgrade golang-binUpgrade cockpit-composerUpgrade grafanaUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade netavarkUpgrade golang-testsUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade criuUpgrade udicaUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade buildahUpgrade crunUpgrade python3-podmanUpgrade osbuild-composer-debuginfoUpgrade golang-raceUpgrade conmonUpgrade osbuild-composer-workerUpgrade cockpit-podmanUpgrade podman-testsUpgrade fuse-overlayfsUpgrade weldr-client-debugsourceUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-catatonitUpgrade libslirpUpgrade grafana-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade critUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debugsourceUpgrade golang-docsUpgrade buildah-debuginfoUpgrade osbuild-luks2Upgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade git-lfs-debugsource | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade golang-raceUpgrade crunUpgrade libslirpUpgrade skopeoUpgrade criuUpgrade osbuild-ostreeUpgrade udicaUpgrade delveUpgrade golang-github-cpuguy83-md2manUpgrade osbuild-selinuxUpgrade netavarkUpgrade criu-develUpgrade libslirp-develUpgrade podmanUpgrade conmonUpgrade golang-testsUpgrade slirp4netnsUpgrade cockpit-composerUpgrade skopeo-testsUpgrade podman-catatonitUpgrade osbuild-composer-dnf-jsonUpgrade podman-pluginsUpgrade python3-podmanUpgrade osbuild-lvm2Upgrade osbuild-composer-workerUpgrade podman-dockerUpgrade podman-gvproxyUpgrade critUpgrade go-toolsetUpgrade grafanaUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade osbuild-composerUpgrade osbuild-luks2Upgrade osbuildUpgrade python3-criuUpgrade golang-docsUpgrade golang-binUpgrade git-lfsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade container-selinuxUpgrade buildahUpgrade golangUpgrade containers-commonUpgrade fuse-overlayfsUpgrade weldr-clientUpgrade podman-remoteUpgrade criu-libsUpgrade runcUpgrade osbuild-composer-coreUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade python3-osbuild | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade conmonUpgrade podmanUpgrade butaneUpgrade skopeoUpgrade ignitionUpgrade openshift-clientsUpgrade runcUpgrade buildah | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade toolbox-debuginfoUpgrade podman-remoteUpgrade delve-debugsourceUpgrade slirp4netns-debuginfoUpgrade cockpit-composerUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade golang-srcUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-osbuildUpgrade netavarkUpgrade criu-develUpgrade podman-debuginfoUpgrade grafana-debugsourceUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade osbuild-ostreeUpgrade osbuild-composer-core-debuginfoUpgrade runc-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade toolboxUpgrade osbuild-composer-coreUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade python3-podmanUpgrade golang-github-cpuguy83-md2manUpgrade osbuildUpgrade podman-remote-debuginfoUpgrade osbuild-selinuxUpgrade golang-binUpgrade golang-testsUpgrade libslirp-debugsourceUpgrade git-lfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade osbuild-composer-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade osbuild-composer-workerUpgrade podman-catatonit-debuginfoUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade osbuild-composerUpgrade osbuild-lvm2Upgrade crunUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-dnf-jsonUpgrade golang-raceUpgrade delve-debuginfoUpgrade udicaUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade runcUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade osbuild-luks2Upgrade libslirpUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade buildah-debuginfoUpgrade golang-docsUpgrade crun-debuginfoUpgrade go-toolsetUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade weldr-client-debugsourceUpgrade podman-dockerUpgrade osbuild-composer-worker-debuginfoUpgrade git-lfsUpgrade criu-libs-debuginfoUpgrade critUpgrade osbuild-composer-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade golang-miscUpgrade grafana-debuginfoUpgrade skopeo-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade weldr-client-debuginfoUpgrade grafanaNo solution existsUpgrade golangUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade buildahUpgrade conmon-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade weldr-clientUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade skopeo-debugsourceUpgrade golang-github-cpuguy83-md2man-debugsource | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade delveUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade criu-debugsourceUpgrade delve-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade golangUpgrade delve-debuginfoUpgrade golang-binUpgrade libslirp-debuginfoUpgrade netavarkUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade podman-pluginsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade runcUpgrade criuUpgrade slirp4netnsUpgrade critUpgrade conmonUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade buildahUpgrade libslirp-debugsourceUpgrade crunUpgrade toolboxUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade skopeo-debugsource | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade golang-github-prometheus-node_exporterUpgrade libbind9-1600-32bitUpgrade libdns1605Upgrade libisc1606-32bitUpgrade go1.18Upgrade go1.19-raceUpgrade python3-bindUpgrade libdns1605-32bitUpgrade go1.18-opensslUpgrade libns1604Upgrade libns1604-32bitUpgrade go1.19-docUpgrade wireUpgrade libisccfg1600Upgrade libisc1606Upgrade libirs1601Upgrade prometheus-blackbox_exporterUpgrade firewalld-prometheus-configUpgrade libirs1601-32bitUpgrade spacecmdUpgrade go1.18-openssl-docUpgrade bind-devel-32bitUpgrade bindUpgrade dracut-saltbootUpgrade go1.18-openssl-raceUpgrade libisccfg1600-32bitUpgrade libirs-develUpgrade bind-docUpgrade prometheus-postgres_exporterUpgrade bind-chrootenvUpgrade bind-utilsUpgrade go1.19Upgrade go1.18-docUpgrade go1.18-raceUpgrade golang-github-prometheus-promuUpgrade bind-develUpgrade libisccc1600-32bitUpgrade libbind9-1600Upgrade libisccc1600Upgrade golang-github-prometheus-prometheus | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.18-src | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub