Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade slirp4netnsUpgrade toolboxUpgrade conmonUpgrade golang-miscUpgrade criu-libsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade go-toolsetUpgrade podman-testsUpgrade golang-raceUpgrade libslirpUpgrade podman-pluginsUpgrade podman-dockerUpgrade golangUpgrade golang-github-cpuguy83-md2manUpgrade python3-podmanUpgrade golang-srcUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade netavarkUpgrade grafanaUpgrade cockpit-podmanUpgrade osbuild-composer-dnf-jsonUpgrade skopeoUpgrade golang-docsUpgrade osbuild-composerUpgrade buildahUpgrade golang-testsUpgrade python3-criuUpgrade delveUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podmanUpgrade toolbox-testsUpgrade criu-develUpgrade skopeo-testsUpgrade containers-commonUpgrade udicaUpgrade weldr-clientUpgrade criuUpgrade runcUpgrade container-selinuxUpgrade podman-catatonitUpgrade golang-binUpgrade osbuild-composer-workerUpgrade crit | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade containerd-stressUpgrade golang-sharedUpgrade runcUpgrade golang-binUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golang-docsUpgrade containerdUpgrade golangUpgrade golang-raceUpgrade docker-debuginfoUpgrade dockerUpgrade golang-miscUpgrade golistUpgrade golang-srcUpgrade golang-tests | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-miscUpgrade golang-srcUpgrade golistUpgrade golist-debuginfoUpgrade golangUpgrade golang-raceUpgrade golang-sharedUpgrade golist-debugsourceUpgrade golang-testsUpgrade golang-bin | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade python3-criuUpgrade libslirpUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade git-lfs-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-debuginfoUpgrade grafana-debugsourceUpgrade netavarkUpgrade runc-debugsourceUpgrade weldr-client-debugsourceUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade golang-testsUpgrade criuUpgrade grafana-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-podmanUpgrade osbuild-luks2Upgrade fuse-overlayfsUpgrade golang-raceUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-workerUpgrade podman-testsUpgrade golang-docsUpgrade toolbox-testsUpgrade conmonUpgrade udicaUpgrade crunUpgrade crun-debuginfoUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade runcUpgrade slirp4netnsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade weldr-client-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade buildah-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-dockerUpgrade podman-catatonitUpgrade git-lfs-debuginfoUpgrade skopeoUpgrade runc-debuginfoUpgrade python3-osbuildUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debugsourceUpgrade git-lfsUpgrade osbuild-composer-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade criu-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade weldr-client-debuginfoUpgrade podman-remoteUpgrade golang-srcUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade weldr-clientUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade osbuildUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade podmanUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade osbuild-selinuxUpgrade osbuild-ostreeUpgrade criu-debugsourceUpgrade golang-binUpgrade golang-miscUpgrade crun-debugsourceUpgrade golangUpgrade podman-pluginsUpgrade cockpit-composerUpgrade toolboxUpgrade osbuild-lvm2Upgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade osbuild-composer-core-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade aardvark-dns | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade criuUpgrade podman-catatonitUpgrade cockpit-composerUpgrade delveUpgrade golang-github-cpuguy83-md2manUpgrade skopeoUpgrade golang-testsUpgrade osbuild-ostreeUpgrade crunUpgrade python3-podmanUpgrade osbuild-lvm2Upgrade criu-develUpgrade podman-pluginsUpgrade conmonUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-selinuxUpgrade golang-raceUpgrade podman-testsUpgrade libslirpUpgrade podmanUpgrade netavarkUpgrade udicaUpgrade skopeo-testsUpgrade slirp4netnsUpgrade golang-miscUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade aardvark-dnsUpgrade container-selinuxUpgrade buildah-testsUpgrade buildahUpgrade fuse-overlayfsUpgrade python3-osbuildUpgrade podman-remoteUpgrade osbuild-composer-workerUpgrade criu-libsUpgrade osbuildUpgrade golangUpgrade containers-commonUpgrade osbuild-luks2Upgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade critUpgrade golang-docsUpgrade golang-binUpgrade git-lfsUpgrade cockpit-podmanUpgrade python3-criuUpgrade podman-dockerUpgrade go-toolsetUpgrade osbuild-composerUpgrade grafanaUpgrade weldr-clientUpgrade containernetworking-pluginsUpgrade runc | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade conmonUpgrade skopeoUpgrade ignitionUpgrade podmanUpgrade openshift-clientsUpgrade butaneUpgrade runcUpgrade buildah | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade grafana-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade toolbox-debuginfoUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade osbuildUpgrade golang-srcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade python3-osbuildUpgrade skopeo-testsUpgrade osbuild-composer-dnf-jsonUpgrade toolboxUpgrade podman-debuginfoUpgrade osbuild-composer-coreUpgrade crunUpgrade osbuild-composer-workerUpgrade libslirp-debugsourceUpgrade delve-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade crun-debugsourceUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade osbuild-composer-core-debuginfoUpgrade criu-libsUpgrade containers-commonUpgrade osbuild-lvm2Upgrade git-lfs-debuginfoUpgrade libslirp-develUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade golang-github-cpuguy83-md2manUpgrade golang-binUpgrade cockpit-composerUpgrade delve-debuginfoUpgrade osbuild-composerUpgrade podman-catatonit-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade criuUpgrade aardvark-dnsUpgrade skopeo-debuginfoUpgrade osbuild-composer-debugsourceUpgrade grafana-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade conmonUpgrade python3-criuUpgrade podman-gvproxyUpgrade git-lfs-debugsourceUpgrade go-toolsetUpgrade slirp4netnsUpgrade git-lfsUpgrade skopeo-debugsourceUpgrade cockpit-podmanUpgrade buildah-testsUpgrade crun-debuginfoUpgrade libslirpUpgrade weldr-client-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade golangUpgrade conmon-debuginfoUpgrade buildahUpgrade golang-miscUpgrade critUpgrade podman-testsUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade weldr-clientUpgrade osbuild-composer-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsNo solution existsUpgrade golang-docsUpgrade osbuild-luks2Upgrade weldr-client-debuginfoUpgrade criu-libs-debuginfoUpgrade grafanaUpgrade udicaUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade runc | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade fuse-overlayfsUpgrade conmonUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade toolboxUpgrade runcUpgrade buildahUpgrade golang-raceUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade critUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade crunUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade netavarkUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade delveUpgrade criu-develUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podmanUpgrade golang-binUpgrade libslirp-develUpgrade skopeo-testsUpgrade skopeoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade runc-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade runc-debuginfo | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade libdns1605-32bitUpgrade golang-github-prometheus-node_exporterUpgrade libns1604Upgrade python3-bindUpgrade libbind9-1600-32bitUpgrade firewalld-prometheus-configUpgrade go1.18Upgrade go1.19-docUpgrade libisc1606-32bitUpgrade libdns1605Upgrade libirs1601Upgrade libisccfg1600Upgrade go1.18-opensslUpgrade libns1604-32bitUpgrade go1.19-raceUpgrade libisc1606Upgrade wireUpgrade spacecmdUpgrade libirs1601-32bitUpgrade prometheus-blackbox_exporterUpgrade go1.18-docUpgrade bind-utilsUpgrade bind-docUpgrade golang-github-prometheus-promuUpgrade go1.18-openssl-raceUpgrade bind-devel-32bitUpgrade libirs-develUpgrade go1.19Upgrade libisccfg1600-32bitUpgrade libisccc1600Upgrade libbind9-1600Upgrade golang-github-prometheus-prometheusUpgrade prometheus-postgres_exporterUpgrade bind-develUpgrade go1.18-raceUpgrade bindUpgrade dracut-saltbootUpgrade go1.18-openssl-docUpgrade libisccc1600-32bitUpgrade bind-chrootenv | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.18 | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub