The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade runfinch-finchUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade cni-pluginsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade rclone-debuginfoUpgrade cni-plugins-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golangUpgrade golistUpgrade rcloneUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade golist-debuginfoUpgrade nerdctl-debuginfoUpgrade amazon-ecr-credential-helperUpgrade dockerUpgrade golang-docsUpgrade soci-snapshotterUpgrade amazon-ssm-agentUpgrade runcUpgrade golang-sharedUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade oci-add-hooksUpgrade containerd-stressUpgrade golang-miscUpgrade nerdctlUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade containerd | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade dockerUpgrade golangUpgrade containerdUpgrade libcap-staticUpgrade containerd-stressUpgrade golang-docsUpgrade runcUpgrade captreeUpgrade golist-debugsourceUpgrade libcapUpgrade golang-miscUpgrade oci-add-hooks-debugsourceUpgrade containerd-debuginfoUpgrade golang-binUpgrade containerd-debugsourceUpgrade soci-snapshotterUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade cni-plugins-debuginfoUpgrade golang-sharedUpgrade containerd-stress-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade libcap-debugsourceUpgrade cni-pluginsUpgrade docker-debugsourceUpgrade runc-debugsourceUpgrade oci-add-hooksUpgrade golang-srcUpgrade runfinch-finchUpgrade libcap-debuginfoUpgrade golistUpgrade runc-debuginfoUpgrade cni-plugins-debugsourceUpgrade amazon-ecr-credential-helperUpgrade libcap-develUpgrade captree-debuginfoUpgrade amazon-ssm-agentUpgrade golist-debuginfoUpgrade ecs-init | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.24Upgrade go1.25-docUpgrade go1.25Upgrade go1.24-docUpgrade go1.25-raceUpgrade go1.24-race | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub