Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade osbuild-composer-workerUpgrade podman-pluginsUpgrade criu-develUpgrade podmanUpgrade libslirp-develUpgrade golang-docsUpgrade crunUpgrade udicaUpgrade container-selinuxUpgrade python3-criuUpgrade skopeo-testsUpgrade golang-raceUpgrade grafana-selinuxUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade libslirpUpgrade containers-commonUpgrade grafanaUpgrade conmonUpgrade image-builderUpgrade delveUpgrade runcUpgrade toolboxUpgrade critUpgrade netavarkUpgrade golang-miscUpgrade buildahUpgrade opentelemetry-collectorUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade toolbox-testsUpgrade golang-testsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade golangUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade grafana-pcpUpgrade criuUpgrade go-toolsetUpgrade golang-binUpgrade aardvark-dnsUpgrade podman-dockerUpgrade golang-srcUpgrade buildah-tests | Jan 26, 2026 | Jan 21, 2026 |
| Alpine Linux | — | Upgrade goUpgrade dockerUpgrade rclone | Dec 3, 2025 | Dec 2, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade runcUpgrade golang-binUpgrade golang-miscUpgrade golang-github-cpuguy83-go-md2manUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golangUpgrade cni-pluginsUpgrade cri-tools-debuginfoUpgrade dockerUpgrade golang-srcUpgrade runfinch-finchUpgrade nerdctl-debuginfoUpgrade ecs-initUpgrade cri-toolsUpgrade golist-debuginfoUpgrade golang-docsUpgrade docker-debuginfoUpgrade containerdUpgrade containerd-stressUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade runc-debuginfoUpgrade golang-sharedUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade golistUpgrade soci-snapshotter | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade libcap-debugsourceUpgrade cni-pluginsUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-burntsushi-tomlUpgrade golang-docsUpgrade docker-debugsourceUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade runc-debuginfoUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade ecs-initUpgrade cni-plugins-debuginfoUpgrade golang-github-burntsushi-toml-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade runc-debugsourceUpgrade captree-debuginfoUpgrade amazon-ssm-agentUpgrade golang-github-burntsushi-toml-develUpgrade containerd-stressUpgrade runcUpgrade docker-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade containerd-debuginfoUpgrade libcap-debuginfoUpgrade cni-plugins-debugsourceUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade captreeUpgrade golang-github-burntsushi-toml-testUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade libcap-staticUpgrade oci-add-hooks-debugsourceUpgrade golang-github-burntsushi-toml-debuginfoUpgrade dockerUpgrade libcapUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-binUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade libcap-develUpgrade golang-srcUpgrade soci-snapshotterUpgrade golangUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2man | Jan 12, 2026 | Dec 2, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Freebsd | — | Upgrade go124Upgrade oauth2-proxyUpgrade go125 | Dec 10, 2025 | Dec 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade image-builderUpgrade yggdrasil-develUpgrade golang-docsUpgrade aardvark-dnsUpgrade osbuild-composerUpgrade buildahUpgrade udicaUpgrade skopeo-testsUpgrade podman-remoteUpgrade go-toolsetUpgrade critUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade grafanaUpgrade yggdrasilUpgrade git-lfsUpgrade osbuild-composer-workerUpgrade buildah-testsUpgrade golang-binUpgrade delveUpgrade grafana-pcpUpgrade ipp-usbUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade containers-commonUpgrade runcUpgrade container-selinuxUpgrade grafana-selinuxUpgrade criuUpgrade libslirpUpgrade golang-srcUpgrade podmanUpgrade criu-develUpgrade podman-testsUpgrade podman-pluginsUpgrade crunUpgrade criu-libsUpgrade podman-catatonitUpgrade skopeoUpgrade libslirp-develUpgrade podman-gvproxyUpgrade golang-raceUpgrade slirp4netnsUpgrade podman-dockerUpgrade netavarkUpgrade conmonUpgrade python3-podmanUpgrade golangUpgrade osbuild-composer-coreUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfs | Jan 23, 2026 | Dec 2, 2025 |
| Redhat Openshift | — | Upgrade skopeoUpgrade containernetworking-pluginsUpgrade podmanUpgrade runc | Aug 10, 2026 | Dec 2, 2025 |
| Redhat_linux | — | Upgrade osbuild-composer-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade flightctl-observabilityUpgrade containernetworking-plugins-debugsourceUpgrade podman-remoteUpgrade image-builder-debugsourceUpgrade libslirp-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade rhc-debugsourceUpgrade grafana-debugsourceUpgrade container-selinuxUpgrade containers-commonUpgrade image-builderUpgrade containernetworking-pluginsUpgrade osbuild-composer-dnf-jsonUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-coreUpgrade yggdrasilUpgrade flightctl-selinuxUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade flightctl-agentUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-plugins-debuginfoUpgrade grafana-selinuxUpgrade gvisor-tap-vsock-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade image-builder-debuginfoUpgrade podmanUpgrade podman-debugsourceUpgrade ipp-usb-debuginfoUpgrade rhc-develUpgrade osbuild-composer-workerUpgrade yggdrasil-debugsourceUpgrade grafana-pcpUpgrade crunUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade rhcUpgrade rhc-debuginfoUpgrade skopeoUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade flightctl-cliUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade python3-podmanUpgrade libslirp-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade osbuild-composerUpgrade slirp4netns-debugsourceUpgrade delve-debugsourceUpgrade delveUpgrade runc-debuginfoUpgrade butaneUpgrade buildah-debugsourceUpgrade yggdrasil-develUpgrade criu-develUpgrade git-lfsUpgrade golang-raceUpgrade grafanaUpgrade rhc-worker-playbookUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade udicaUpgrade flightctl-servicesUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade python3-criuUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade podman-tests-debuginfoUpgrade git-lfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade buildah-testsUpgrade runcUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfsUpgrade grafana-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debuginfoUpgrade toolbox-testsUpgrade netavarkUpgrade ipp-usbUpgrade conmon-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade slirp4netnsUpgrade critUpgrade buildah-debuginfoNo solution existsUpgrade golangUpgrade go-toolsetUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade skopeo-debugsourceUpgrade gvisor-tap-vsockUpgrade buildahUpgrade aardvark-dnsUpgrade yggdrasil-debuginfoUpgrade toolbox-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golang-miscUpgrade crun-debuginfoUpgrade criuUpgrade butane-debuginfoUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade butane-debugsourceUpgrade golang-docsUpgrade gvisor-tap-vsock-gvforwarderUpgrade criu-debugsourceUpgrade rhc-worker-playbook-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade opentelemetry-collectorUpgrade libslirpUpgrade golang-tests | Jan 22, 2026 | Dec 2, 2025 |
| Rocky_linux | — | Upgrade yggdrasil-debugsourceUpgrade criuUpgrade yggdrasil-debuginfoUpgrade osbuild-composerUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade ipp-usbUpgrade buildah-tests-debuginfoUpgrade image-builder-debugsourceUpgrade conmon-debuginfoUpgrade yggdrasil-develUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade golangUpgrade buildahUpgrade git-lfs-debuginfoUpgrade grafana-pcp-debugsourceUpgrade runc-debugsourceUpgrade opentelemetry-collectorUpgrade podman-debuginfoUpgrade go-toolsetUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade grafana-pcp-debuginfoUpgrade netavarkUpgrade image-builderUpgrade podman-catatonitUpgrade podman-remoteUpgrade grafanaUpgrade osbuild-composer-coreUpgrade conmon-debugsourceUpgrade containers-commonUpgrade buildah-testsUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade python3-criuUpgrade fuse-overlayfsUpgrade grafana-pcpUpgrade toolbox-testsUpgrade criu-develUpgrade podman-gvproxyUpgrade libslirpUpgrade skopeoUpgrade ipp-usb-debuginfoUpgrade crunUpgrade podman-testsUpgrade slirp4netnsUpgrade golang-raceUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade yggdrasilUpgrade runcUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade delveUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade podman-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade image-builder-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsourceUpgrade git-lfs-debugsourceUpgrade delve-debugsourceUpgrade grafana-selinuxUpgrade toolbox-debuginfoUpgrade grafana-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade osbuild-composer-debuginfoUpgrade libslirp-devel | Jan 26, 2026 | Jan 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub