Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade python3-podmanUpgrade criuUpgrade grafana-pcpUpgrade opentelemetry-collectorUpgrade golang-miscUpgrade golang-testsUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade buildah-testsUpgrade golang-binUpgrade golang-srcUpgrade netavarkUpgrade buildahUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-dockerUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golangUpgrade podman-remoteUpgrade podman-catatonitUpgrade osbuild-composerUpgrade golang-docsUpgrade podman-pluginsUpgrade crunUpgrade toolboxUpgrade skopeo-testsUpgrade grafanaUpgrade critUpgrade golang-raceUpgrade udicaUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade podman-testsUpgrade libslirp-develUpgrade skopeoUpgrade libslirpUpgrade grafana-selinuxUpgrade runcUpgrade containernetworking-pluginsUpgrade git-lfsUpgrade containers-commonUpgrade image-builderUpgrade osbuild-composer-workerUpgrade podmanUpgrade conmonUpgrade python3-criuUpgrade delveUpgrade criu-devel | Jan 26, 2026 | Jan 21, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rcloneUpgrade docker | Dec 3, 2025 | Dec 2, 2025 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooksUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade soci-snapshotterUpgrade cri-toolsUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerd-stressUpgrade golistUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade golang-sharedUpgrade containerdUpgrade golang-docsUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade runfinch-finchUpgrade golang-srcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-github-cpuguy83-go-md2manUpgrade dockerUpgrade cri-tools-debuginfoUpgrade runcUpgrade golang-testsUpgrade cni-plugins | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade libcap-staticUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-burntsushi-toml-testUpgrade oci-add-hooksUpgrade containerd-stress-debuginfoUpgrade golangUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2manUpgrade captreeUpgrade golang-binUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade libcap-develUpgrade golang-testsUpgrade dockerUpgrade libcapUpgrade golang-srcUpgrade golang-github-burntsushi-toml-debuginfoUpgrade containerd-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade docker-debugsourceUpgrade cni-plugins-debugsourceUpgrade amazon-ecr-credential-helperUpgrade libcap-debugsourceUpgrade golang-sharedUpgrade golang-docsUpgrade cni-plugins-debuginfoUpgrade ecs-initUpgrade containerd-stressUpgrade captree-debuginfoUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade libcap-debuginfoUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade containerdUpgrade golang-github-burntsushi-toml-develUpgrade docker-debuginfoUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-github-burntsushi-toml-debugsourceUpgrade runcUpgrade golang-github-burntsushi-toml-test-develUpgrade cni-pluginsUpgrade runfinch-finchUpgrade golang-github-burntsushi-tomlUpgrade runc-debugsource | Jan 12, 2026 | Dec 2, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Freebsd | — | Upgrade go125Upgrade oauth2-proxyUpgrade go124 | Dec 10, 2025 | Dec 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade osbuild-composer-coreUpgrade libslirpUpgrade criuUpgrade python3-podmanUpgrade slirp4netnsUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-raceUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade skopeoUpgrade podman-catatonitUpgrade podmanUpgrade podman-dockerUpgrade podman-pluginsUpgrade crunUpgrade criu-libsUpgrade podman-testsUpgrade criu-develUpgrade conmonUpgrade netavarkUpgrade go-toolsetUpgrade udicaUpgrade yggdrasil-develUpgrade golang-binUpgrade podman-remoteUpgrade image-builderUpgrade golang-docsUpgrade buildahUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade aardvark-dnsUpgrade grafana-selinuxUpgrade grafana-pcpUpgrade grafanaUpgrade ipp-usbUpgrade critUpgrade osbuild-composer-workerUpgrade containers-commonUpgrade runcUpgrade buildah-testsUpgrade delveUpgrade git-lfsUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade osbuild-composerUpgrade yggdrasil | Jan 23, 2026 | Dec 2, 2025 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade runcUpgrade containernetworking-plugins | Aug 10, 2026 | Dec 2, 2025 |
| Redhat_linux | — | Upgrade criu-develUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade image-builder-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composerUpgrade container-selinuxUpgrade flightctl-selinuxUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade libslirp-develUpgrade rhc-worker-playbookUpgrade python3-podmanUpgrade osbuild-composer-coreUpgrade podman-catatonit-debuginfoUpgrade toolbox-debuginfoUpgrade crunUpgrade yggdrasilUpgrade grafana-debugsourceUpgrade podman-pluginsUpgrade flightctl-agentUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-testsUpgrade grafana-selinuxUpgrade rhc-debugsourceUpgrade rhc-develUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade podman-remoteUpgrade containers-commonUpgrade podmanUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade git-lfs-debuginfoUpgrade delve-debuginfoUpgrade grafana-pcpUpgrade ipp-usb-debuginfoUpgrade criu-libsUpgrade rhcUpgrade delveUpgrade runc-debuginfoUpgrade yggdrasil-debugsourceUpgrade skopeoUpgrade rhc-debuginfoUpgrade image-builderUpgrade flightctl-observabilityUpgrade yggdrasil-develUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade butaneUpgrade flightctl-cliUpgrade gvisor-tap-vsock-debugsourceUpgrade libslirp-debuginfoUpgrade golang-raceUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade git-lfsUpgrade podman-debuginfoUpgrade osbuild-composer-workerUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade grafana-pcp-debuginfoUpgrade crun-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade ipp-usbUpgrade golang-docsUpgrade buildah-tests-debuginfoUpgrade criuUpgrade podman-dockerUpgrade golang-testsUpgrade aardvark-dnsUpgrade gvisor-tap-vsock-gvforwarderUpgrade runc-debugsourceUpgrade conmonUpgrade criu-debuginfoUpgrade grafana-pcp-debugsourceUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade butane-debugsourceUpgrade criu-libs-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade udicaUpgrade flightctl-servicesUpgrade butane-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade podman-catatonitUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade gvisor-tap-vsockUpgrade golang-miscUpgrade yggdrasil-debuginfoUpgrade toolbox-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade osbuild-composer-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-tests-debuginfoUpgrade podman-gvproxyUpgrade python3-criuUpgrade opentelemetry-collectorUpgrade libslirpUpgrade rhc-worker-playbook-debuginfoUpgrade podman-testsNo solution existsUpgrade skopeo-debugsourceUpgrade golangUpgrade buildah-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade go-toolsetUpgrade critUpgrade toolbox-tests | Jan 22, 2026 | Dec 2, 2025 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade image-builder-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade podman-tests-debuginfoUpgrade runc-debuginfoUpgrade yggdrasilUpgrade runcUpgrade slirp4netnsUpgrade podman-testsUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade ipp-usb-debuginfoUpgrade skopeoUpgrade crunUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade conmonUpgrade crun-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade grafana-selinuxUpgrade grafana-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade libslirpUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade critUpgrade podmanUpgrade yggdrasil-develUpgrade buildah-testsUpgrade go-toolsetUpgrade golangUpgrade image-builder-debugsourceUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade buildah-debuginfoUpgrade grafana-pcp-debuginfoUpgrade containernetworking-pluginsUpgrade yggdrasil-debugsourceUpgrade yggdrasil-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composerUpgrade ipp-usbUpgrade criuUpgrade conmon-debugsourceUpgrade toolbox-testsUpgrade image-builderUpgrade podman-remoteUpgrade podman-catatonitUpgrade osbuild-composer-coreUpgrade netavarkUpgrade grafana-debuginfoUpgrade grafanaUpgrade git-lfsUpgrade golang-binUpgrade containers-commonUpgrade git-lfs-debuginfoUpgrade python3-criuUpgrade opentelemetry-collectorUpgrade grafana-pcp-debugsourceUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade buildahUpgrade skopeo-debugsourceUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafana-pcpUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade libslirp-debuginfo | Jan 26, 2026 | Jan 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub