Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade golist-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerd-stressUpgrade golang-testsUpgrade golang-binUpgrade containerd-debuginfoUpgrade runc-debuginfoUpgrade containerdUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade dockerUpgrade oci-add-hooksUpgrade amazon-ecr-credential-helperUpgrade golang-docsUpgrade golistUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade rclone-debuginfoUpgrade golangUpgrade cni-pluginsUpgrade docker-debuginfoUpgrade rcloneUpgrade runfinch-finchUpgrade golang-miscUpgrade runcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-srcUpgrade nerdctlUpgrade ecs-initUpgrade cri-toolsUpgrade cri-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-stress-debuginfoUpgrade cni-pluginsUpgrade nerdctlUpgrade golist-debuginfoUpgrade libcapUpgrade golistUpgrade golang-binUpgrade runc-debugsourceUpgrade cni-plugins-debuginfoUpgrade golang-srcUpgrade golist-debugsourceUpgrade oci-add-hooksUpgrade runfinch-finchUpgrade captree-debuginfoUpgrade golang-testsUpgrade libcap-develUpgrade docker-debugsourceUpgrade ecs-initUpgrade libcap-staticUpgrade golangUpgrade oci-add-hooks-debugsourceUpgrade captreeUpgrade golang-miscUpgrade docker-debuginfoUpgrade runcUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade soci-snapshotterUpgrade libcap-debuginfoUpgrade amazon-cloudwatch-agentUpgrade containerdUpgrade containerd-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade cni-plugins-debugsourceUpgrade runc-debuginfoUpgrade libcap-debugsourceUpgrade docker | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25Upgrade go1.25-raceUpgrade go1.25-docUpgrade go1.24Upgrade go1.24-docUpgrade go1.24-race | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub