Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade golistUpgrade dockerUpgrade amazon-ssm-agentUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooksUpgrade rclone-debuginfoUpgrade containerd-stressUpgrade golang-sharedUpgrade oci-add-hooks-debuginfoUpgrade soci-snapshotterUpgrade cni-plugins-debuginfoUpgrade amazon-cloudwatch-agentUpgrade containerdUpgrade golang-testsUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade cni-pluginsUpgrade docker-debuginfoUpgrade cri-toolsUpgrade nerdctlUpgrade cri-tools-debuginfoUpgrade ecs-initUpgrade runfinch-finchUpgrade golangUpgrade golang-srcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runcUpgrade golang-miscUpgrade rclone | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golistUpgrade golangUpgrade golang-miscUpgrade cni-pluginsUpgrade oci-add-hooks-debugsourceUpgrade captree-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade captreeUpgrade libcap-staticUpgrade oci-add-hooksUpgrade golist-debugsourceUpgrade golang-testsUpgrade cni-plugins-debuginfoUpgrade libcapUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade golang-srcUpgrade docker-debugsourceUpgrade libcap-develUpgrade golist-debuginfoUpgrade runc-debugsourceUpgrade ecs-initUpgrade cni-plugins-debugsourceUpgrade dockerUpgrade libcap-debugsourceUpgrade runc-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade containerd-stressUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade golang-docsUpgrade containerd-debuginfoUpgrade soci-snapshotterUpgrade oci-add-hooks-debuginfoUpgrade amazon-ssm-agentUpgrade containerd-debugsourceUpgrade containerdUpgrade libcap-debuginfo | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.25-raceUpgrade go1.25Upgrade go1.24Upgrade go1.24-docUpgrade go1.24-race | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub