When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade slirp4netnsUpgrade podman-remoteUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade crunUpgrade runcUpgrade opentelemetry-collectorUpgrade udicaUpgrade podman-testsUpgrade critUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade criu-develUpgrade container-selinuxUpgrade aardvark-dnsUpgrade buildahUpgrade conmonUpgrade toolboxUpgrade netavarkUpgrade toolbox-testsUpgrade buildah-testsUpgrade criu-libsUpgrade skopeoUpgrade fuse-overlayfsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade python3-podmanUpgrade libslirpUpgrade libslirp-develUpgrade containers-commonUpgrade podman-catatonitUpgrade cockpit-podman | Jul 7, 2026 | Jul 1, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade rcloneUpgrade golang-miscUpgrade soci-snapshotterUpgrade golist-debuginfoUpgrade runfinch-finchUpgrade cri-toolsUpgrade golang-srcUpgrade golangUpgrade golistUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade cri-tools-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade cni-pluginsUpgrade golang-testsUpgrade runcUpgrade ecs-initUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade nerdctlUpgrade golang-sharedUpgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade amazon-ecr-credential-helper | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade yq-debuginfoUpgrade golist-debuginfoUpgrade golangUpgrade amazon-ecr-credential-helperUpgrade containerd-stress-debuginfoUpgrade oci-add-hooksUpgrade runc-debuginfoUpgrade soci-snapshotterUpgrade docker-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade docker-debugsourceUpgrade golistUpgrade credentials-fetcherUpgrade golang-srcUpgrade rcloneUpgrade golang-miscUpgrade dockerUpgrade golist-debugsourceUpgrade yq-debugsourceUpgrade rclone-debugsourceUpgrade golang-docsUpgrade golang-binUpgrade runc-debugsourceUpgrade runcUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade golang-sharedUpgrade containerd-debugsourceUpgrade golang-testsUpgrade oci-add-hooks-debugsourceUpgrade ecs-initUpgrade containerdUpgrade nerdctlUpgrade yqUpgrade runfinch-finch | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade delveUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade go-toolset | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-providerUpgrade openshiftUpgrade ose-azure-acr-image-credential-providerUpgrade butaneUpgrade openshift-clientsUpgrade cri-tools | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade golang-miscUpgrade netavarkUpgrade ipp-usbUpgrade yggdrasil-examples-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade golang-srcUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade criuUpgrade go-toolsetUpgrade cockpit-podmanUpgrade buildah-testsNo solution existsUpgrade buildahUpgrade yggdrasil-debugsourceUpgrade flightctl-cliUpgrade golangUpgrade git-lfs-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade toolbox-testsUpgrade yggdrasil-develUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade conmon-debuginfoUpgrade rhc-worker-scriptUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade rhc-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade python3-criuUpgrade criu-debugsourceUpgrade yggdrasil-debuginfoUpgrade image-builder-debugsourceUpgrade rhc-worker-playbookUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade golang-testsUpgrade opentelemetry-collectorUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade flightctl-agentUpgrade udicaUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade flightctl-selinuxUpgrade critUpgrade delveUpgrade skopeoUpgrade image-builderUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade ipp-usb-debuginfoUpgrade flightctl-servicesUpgrade flightctl-observabilityUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade rhc-debuginfoUpgrade rhcUpgrade podman-pluginsUpgrade image-builder-debuginfoUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade toolboxUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade criu-develUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade yggdrasilUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade runcUpgrade podman-debugsourceUpgrade golang-raceUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade libslirp-devel | Jul 3, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade skopeoUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade podman-remoteUpgrade runc-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade go-toolsetUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade image-builder-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade python3-criuUpgrade crunUpgrade delveUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netnsUpgrade yggdrasilUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade yggdrasil-debugsourceUpgrade golang-binUpgrade libslirpUpgrade ipp-usb-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade ipp-usbUpgrade image-builder-debugsourceUpgrade conmon-debugsourceUpgrade git-lfs-debuginfoUpgrade delve-debugsourceUpgrade yggdrasil-develUpgrade delve-debuginfoUpgrade podmanUpgrade buildah-testsUpgrade toolbox-testsUpgrade opentelemetry-collectorUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade criu-libsUpgrade crun-debuginfoUpgrade containers-commonUpgrade buildah-debuginfoUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade image-builderUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade criuUpgrade yggdrasil-debuginfoUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade netavark | Jul 7, 2026 | Jul 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub