Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildah-testsUpgrade podman-dockerUpgrade grafanaUpgrade netavarkUpgrade golang-github-cpuguy83-md2manUpgrade libslirpUpgrade conmonUpgrade golang-miscUpgrade golang-raceUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade golangUpgrade git-lfsUpgrade podman-pluginsUpgrade go-toolsetUpgrade osbuild-composer-coreUpgrade python3-podmanUpgrade crunUpgrade slirp4netnsUpgrade podman-testsUpgrade libslirp-develUpgrade golang-srcUpgrade podman-gvproxyUpgrade toolboxUpgrade toolbox-testsUpgrade skopeoUpgrade golang-binUpgrade critUpgrade criuUpgrade osbuild-composerUpgrade golang-testsUpgrade delveUpgrade podmanUpgrade python3-criuUpgrade golang-docsUpgrade buildahUpgrade containers-commonUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade criu-develUpgrade osbuild-composer-dnf-jsonUpgrade weldr-clientUpgrade osbuild-composer-workerUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade runcUpgrade container-selinuxUpgrade udica | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade runc-debuginfoUpgrade containerd-stressUpgrade golist-debuginfoUpgrade containerdUpgrade dockerUpgrade golang-srcUpgrade docker-debuginfoUpgrade golang-miscUpgrade golistUpgrade golang-testsUpgrade golang-raceUpgrade golang | Dec 7, 2022 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debugsourceUpgrade golang-raceUpgrade golang-sharedUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golistUpgrade golang-docsUpgrade golist-debuginfoUpgrade golang-misc | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade osbuild-luks2Upgrade podman-dockerUpgrade slirp4netnsUpgrade osbuild-composer-debugsourceUpgrade toolbox-testsUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade runc-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade conmonUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade fuse-overlayfsUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-worker-debuginfoUpgrade netavarkUpgrade skopeo-debugsourceUpgrade criuUpgrade golang-raceUpgrade buildahUpgrade udicaUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade podman-catatonitUpgrade podman-testsUpgrade buildah-testsUpgrade libslirpUpgrade python3-criuUpgrade runcUpgrade weldr-client-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade git-lfs-debugsourceUpgrade critUpgrade conmon-debuginfoUpgrade grafana-debugsourceUpgrade weldr-client-debugsourceUpgrade skopeo-debuginfoUpgrade golang-miscUpgrade golang-binUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade osbuild-composer-core-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debugsourceUpgrade skopeoUpgrade runc-debuginfoUpgrade python3-osbuildUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade weldr-client-debuginfoUpgrade toolboxUpgrade osbuild-lvm2Upgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade git-lfs-debuginfoUpgrade delveUpgrade cockpit-composerUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade podmanUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade delve-debuginfoUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade osbuild-selinuxUpgrade osbuild-ostreeUpgrade criu-debugsourceUpgrade osbuildUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade libslirp-develUpgrade golangUpgrade podman-pluginsUpgrade osbuild-composer-tests-debuginfoUpgrade weldr-clientUpgrade git-lfsUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debuginfo | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade go118Upgrade go119 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade golangUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade cockpit-podmanUpgrade grafanaUpgrade osbuild-composerUpgrade podman-dockerUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade runcUpgrade buildah-testsUpgrade buildahUpgrade fuse-overlayfsUpgrade osbuild-composer-workerUpgrade osbuildUpgrade python3-osbuildUpgrade criu-libsUpgrade weldr-clientUpgrade podman-remoteUpgrade critUpgrade git-lfsUpgrade golang-binUpgrade osbuild-luks2Upgrade python3-criuUpgrade golang-miscUpgrade containers-commonUpgrade golang-docsUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade container-selinuxUpgrade golang-github-cpuguy83-md2manUpgrade slirp4netnsUpgrade golang-testsUpgrade cockpit-composerUpgrade podmanUpgrade netavarkUpgrade osbuild-lvm2Upgrade podman-testsUpgrade skopeo-testsUpgrade python3-podmanUpgrade podman-pluginsUpgrade criu-develUpgrade libslirpUpgrade golang-raceUpgrade osbuild-ostreeUpgrade udicaUpgrade libslirp-develUpgrade conmonUpgrade podman-catatonitUpgrade skopeoUpgrade criuUpgrade osbuild-selinuxUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade crun | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade runcUpgrade buildahUpgrade skopeoUpgrade butaneUpgrade openshift-clientsUpgrade ignitionUpgrade podmanUpgrade conmon | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade toolboxUpgrade podman-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-ostreeUpgrade delve-debuginfoUpgrade git-lfs-debuginfoUpgrade golang-raceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade delve-debugsourceUpgrade skopeo-testsUpgrade osbuild-composer-tests-debuginfoUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-srcUpgrade osbuild-composer-coreUpgrade osbuildUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade libslirp-debuginfoUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade podman-pluginsUpgrade cockpit-composerUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade netavarkUpgrade osbuild-composer-core-debuginfoUpgrade grafana-debugsourceUpgrade osbuild-lvm2Upgrade crunUpgrade libslirp-develUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade osbuild-composerUpgrade python3-osbuildUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade git-lfsUpgrade libslirpUpgrade weldr-client-debugsourceUpgrade slirp4netnsUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade udicaUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade runcUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade osbuild-luks2Upgrade criu-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade weldr-clientUpgrade weldr-client-debuginfoUpgrade grafana-debuginfoUpgrade criuUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade golang-miscUpgrade osbuild-composer-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade weldr-client-tests-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade critUpgrade golang-docsUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade grafanaUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade go-toolsetUpgrade git-lfs-debugsource | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade golangUpgrade delve-debuginfoUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade golang-binUpgrade libslirp-develUpgrade podman-pluginsUpgrade delveUpgrade conmon-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade netavarkUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade skopeoUpgrade delve-debugsourceUpgrade runc-debugsourceUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade crun-debugsourceUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade crunUpgrade buildahUpgrade skopeo-debugsourceUpgrade runcUpgrade golang-raceUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade go-toolsetUpgrade libslirpUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade buildah-tests | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade firewalld-prometheus-configUpgrade prometheus-blackbox_exporterUpgrade libirs1601-32bitUpgrade spacecmdUpgrade python3-bindUpgrade libbind9-1600-32bitUpgrade libns1604Upgrade wireUpgrade libdns1605-32bitUpgrade libdns1605Upgrade libisccfg1600Upgrade libisc1606Upgrade go1.18-opensslUpgrade libns1604-32bitUpgrade golang-github-prometheus-node_exporterUpgrade go1.19-docUpgrade go1.18Upgrade go1.19-raceUpgrade libisc1606-32bitUpgrade libirs1601Upgrade go1.18-docUpgrade bind-docUpgrade libirs-develUpgrade go1.19Upgrade libisccc1600-32bitUpgrade libisccfg1600-32bitUpgrade go1.18-raceUpgrade bind-devel-32bitUpgrade go1.18-openssl-docUpgrade bindUpgrade dracut-saltbootUpgrade golang-github-prometheus-promuUpgrade go1.18-openssl-raceUpgrade bind-develUpgrade prometheus-postgres_exporterUpgrade libisccc1600Upgrade bind-chrootenvUpgrade bind-utilsUpgrade libbind9-1600Upgrade golang-github-prometheus-prometheus | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.18-src | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub