During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade podman-pluginsUpgrade golang-binUpgrade conmonUpgrade podman-testsUpgrade criuUpgrade skopeo-testsUpgrade podman-dockerUpgrade crunUpgrade podmanUpgrade golang-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade udicaUpgrade osbuild-composer-workerUpgrade slirp4netnsUpgrade python3-criuUpgrade buildah-testsUpgrade criu-develUpgrade critUpgrade container-selinuxUpgrade runcUpgrade golang-docsUpgrade toolbox-testsUpgrade delveUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade libslirpUpgrade grafanaUpgrade git-lfsUpgrade grafana-pcpUpgrade golang-raceUpgrade osbuild-composerUpgrade containers-commonUpgrade buildahUpgrade libslirp-develUpgrade netavarkUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade skopeoUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade aardvark-dnsUpgrade osbuild-composer-coreUpgrade opentelemetry-collectorUpgrade golang-srcUpgrade golang-miscUpgrade grafana-selinux | May 7, 2026 | May 6, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nerdctlUpgrade ecs-initUpgrade runcUpgrade golang-sharedUpgrade containerd-stressUpgrade golistUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade runc-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golangUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade golang-srcUpgrade soci-snapshotterUpgrade dockerUpgrade golang-binUpgrade nerdctl-debuginfoUpgrade golang-miscUpgrade golang-tests | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2manUpgrade yq-debugsourceUpgrade golang-docsUpgrade amazon-ecr-credential-helperUpgrade containerd-stressUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade credentials-fetcherUpgrade nerdctlUpgrade runc-debuginfoUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade oci-add-hooks-debugsourceUpgrade containerd-debugsourceUpgrade golang-sharedUpgrade golang-binUpgrade runcUpgrade golist-debuginfoUpgrade containerdUpgrade golang-github-burntsushi-toml-test-develUpgrade containerd-debuginfoUpgrade golist-debugsourceUpgrade golang-github-burntsushi-toml-testUpgrade oci-add-hooksUpgrade containerd-stress-debuginfoUpgrade soci-snapshotterUpgrade golang-miscUpgrade runc-debugsourceUpgrade runfinch-finchUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade dockerUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golangUpgrade golang-testsUpgrade yqUpgrade golang-github-burntsushi-toml-develUpgrade golang-github-burntsushi-tomlUpgrade yq-debuginfoUpgrade golistUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-github-burntsushi-toml-debuginfoUpgrade docker-debuginfoUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade docker-debugsource | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade git-lfsUpgrade go-toolsetUpgrade golang-docsUpgrade grafanaUpgrade golang-testsUpgrade grafana-pcpUpgrade grafana-selinuxUpgrade golang-raceUpgrade golang-binUpgrade delve | Apr 27, 2026 | Apr 8, 2026 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade podmanUpgrade runcUpgrade containernetworking-pluginsUpgrade openshiftUpgrade skopeoUpgrade butaneUpgrade ose-aws-ecr-image-credential-providerUpgrade ignitionUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-o | Aug 10, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade rhc-worker-scriptUpgrade grafana-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-pcp-debuginfoUpgrade go-fdo-serverUpgrade osbuild-composer-debuginfoUpgrade grafana-selinuxUpgrade critUpgrade crunUpgrade host-metering-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade flightctl-servicesUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade osbuild-composer-workerUpgrade host-metering-debugsourceUpgrade osbuild-composer-debugsourceUpgrade ipp-usbUpgrade golang-docsNo solution existsUpgrade podman-tests-debuginfoUpgrade toolboxUpgrade runcUpgrade golang-testsUpgrade flightctl-agentUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-fdo-server-rendezvousUpgrade libslirp-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade rhc-worker-playbook-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-testsUpgrade yggdrasilUpgrade grafana-debugsourceUpgrade golang-binUpgrade yggdrasil-debugsourceUpgrade go-fdo-client-debuginfoUpgrade delve-debugsourceUpgrade host-meteringUpgrade criu-develUpgrade go-fdo-server-debuginfoUpgrade grafana-pcp-debugsourceUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade cockpit-podmanUpgrade libslirpUpgrade podman-remoteUpgrade go-fdo-clientUpgrade podman-debugsourceUpgrade podman-dockerUpgrade skopeoUpgrade podman-testsUpgrade yggdrasil-debuginfoUpgrade rhc-debuginfoUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade go-fdo-server-debugsourceUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade ipp-usb-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade udicaUpgrade podman-debuginfoUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade git-lfsUpgrade go-toolsetUpgrade buildahUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade flightctl-selinuxUpgrade osbuild-composer-coreUpgrade yggdrasil-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-srcUpgrade libslirp-develUpgrade image-builder-debuginfoUpgrade buildah-debuginfoUpgrade delve-debuginfoUpgrade gvisor-tap-vsockUpgrade runc-debuginfoUpgrade image-builderUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade go-fdo-server-manufacturerUpgrade netavarkUpgrade runc-debugsourceUpgrade go-fdo-client-debugsourceUpgrade python3-podmanUpgrade rhc-develUpgrade gvisor-tap-vsock-gvforwarderUpgrade osbuild-composer-tests-debuginfoUpgrade criu-debuginfoUpgrade containers-commonUpgrade go-fdo-server-ownerUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade opentelemetry-collectorUpgrade golangUpgrade grafana-pcpUpgrade image-builder-debugsourceUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade git-lfs-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade flightctl-observabilityUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade rhc-worker-playbookUpgrade host-metering-selinuxUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade flightctl-cliUpgrade crun-debuginfoUpgrade rhc-debugsourceUpgrade rhcUpgrade osbuild-composerUpgrade golang-miscUpgrade osbuild-composer-core-debuginfoUpgrade aardvark-dnsUpgrade gvisor-tap-vsock-debuginfoUpgrade grafana | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade grafana-selinuxUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade image-builderUpgrade golang-binUpgrade osbuild-composerUpgrade crun-debugsourceUpgrade podmanUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade image-builder-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade delve-debugsourceUpgrade go-fdo-client-debuginfoUpgrade go-fdo-serverUpgrade go-fdo-server-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade delveUpgrade grafana-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade yggdrasilUpgrade yggdrasil-debugsourceUpgrade runc-debuginfoUpgrade yggdrasil-develUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade criu-develUpgrade toolbox-debuginfoUpgrade skopeoUpgrade delve-debuginfoUpgrade criu-libsUpgrade git-lfsUpgrade git-lfs-debuginfoUpgrade osbuild-composer-coreUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade yggdrasil-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade criu-libs-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade opentelemetry-collectorUpgrade criu-debuginfoUpgrade libslirpUpgrade golangUpgrade go-fdo-server-debugsourceUpgrade slirp4netnsUpgrade osbuild-composer-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade criuUpgrade podman-gvproxyUpgrade osbuild-composer-debugsourceUpgrade grafana-pcp-debuginfoUpgrade go-fdo-client-debugsourceUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade osbuild-composer-workerUpgrade conmonUpgrade podman-testsUpgrade critUpgrade conmon-debugsourceUpgrade buildahUpgrade toolbox-debugsourceUpgrade golang-raceUpgrade go-fdo-clientUpgrade toolbox-testsUpgrade ipp-usbUpgrade grafana-debuginfoUpgrade runc-debugsourceUpgrade podman-tests-debuginfoUpgrade netavarkUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade ipp-usb-debuginfoUpgrade grafana-pcp-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsource | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.9 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub