When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade golangUpgrade podman-catatonitUpgrade containers-commonUpgrade netavarkUpgrade skopeoUpgrade criu-libsUpgrade golang-raceUpgrade golang-srcUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade criuUpgrade aardvark-dnsUpgrade golang-miscUpgrade conmonUpgrade python3-podmanUpgrade toolbox-testsUpgrade podmanUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade golang-testsUpgrade buildahUpgrade udicaUpgrade delveUpgrade crunUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade criu-develUpgrade golang-binUpgrade critUpgrade podman-dockerUpgrade podman-pluginsUpgrade golang-docsUpgrade python3-criuUpgrade git-lfsUpgrade skopeo-testsUpgrade opentelemetry-collectorUpgrade go-toolsetUpgrade container-selinuxUpgrade podman-remoteUpgrade runcUpgrade podman-gvproxy | Jul 7, 2026 | Jul 1, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade oci-add-hooksUpgrade rcloneUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade golang-miscUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runc-debuginfoUpgrade golangUpgrade cni-plugins-debuginfoUpgrade golist-debuginfoUpgrade containerd-debuginfoUpgrade cri-tools-debuginfoUpgrade cri-toolsUpgrade golang-srcUpgrade docker-debuginfoUpgrade golistUpgrade golang-sharedUpgrade oci-add-hooks-debuginfoUpgrade rclone-debuginfoUpgrade golang-binUpgrade containerdUpgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade ecs-initUpgrade amazon-ecr-credential-helperUpgrade golang-docsUpgrade amazon-cloudwatch-agentUpgrade cni-pluginsUpgrade runcUpgrade golang-testsUpgrade nerdctl | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade yqUpgrade rclone-debuginfoUpgrade golang-sharedUpgrade oci-add-hooks-debugsourceUpgrade rclone-debugsourceUpgrade containerdUpgrade runfinch-finchUpgrade golang-testsUpgrade nerdctlUpgrade ecs-initUpgrade runcUpgrade runc-debugsourceUpgrade golist-debugsourceUpgrade golang-binUpgrade containerd-debugsourceUpgrade dockerUpgrade containerd-debuginfoUpgrade yq-debugsourceUpgrade containerd-stressUpgrade soci-snapshotterUpgrade docker-debugsourceUpgrade golang-srcUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfoUpgrade golang-miscUpgrade runc-debuginfoUpgrade golistUpgrade oci-add-hooksUpgrade golist-debuginfoUpgrade docker-debuginfoUpgrade yq-debuginfoUpgrade golangUpgrade rcloneUpgrade containerd-stress-debuginfoUpgrade credentials-fetcher | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-raceUpgrade golang-binUpgrade delveUpgrade golang-srcUpgrade golangUpgrade go-toolsetUpgrade golang-miscUpgrade golang-docs | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-providerUpgrade openshift-clientsUpgrade openshiftUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade butane | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade rhc-worker-playbookUpgrade podman-remoteUpgrade rhc-debugsourceUpgrade conmon-debuginfoUpgrade rhc-worker-playbook-debuginfoUpgrade netavarkUpgrade podman-catatonitUpgrade golangUpgrade rhc-worker-playbook-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade toolbox-testsUpgrade yggdrasil-develUpgrade delve-debuginfoUpgrade git-lfs-debuginfoUpgrade python3-criuUpgrade yggdrasil-debugsourceUpgrade buildah-testsUpgrade opentelemetry-collectorUpgrade golang-srcUpgrade criu-debugsourceUpgrade rhc-worker-scriptUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade golang-testsUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade go-toolsetUpgrade golang-miscUpgrade criuUpgrade yggdrasil-debuginfoNo solution existsUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade libslirp-debuginfoUpgrade image-builder-debugsourceUpgrade buildahUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade ipp-usbUpgrade aardvark-dnsUpgrade podman-dockerUpgrade flightctl-cliUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade udicaUpgrade flightctl-selinuxUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade critUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade crunUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade image-builder-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade conmonUpgrade skopeo-testsUpgrade rhc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade podmanUpgrade rhcUpgrade toolbox-debuginfoUpgrade containers-commonUpgrade golang-raceUpgrade skopeoUpgrade runc-debuginfoUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade ipp-usb-debuginfoUpgrade image-builderUpgrade flightctl-servicesUpgrade delveUpgrade flightctl-observabilityUpgrade yggdrasilUpgrade flightctl-agentUpgrade containernetworking-plugins-debugsource | Jul 3, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade skopeoUpgrade critUpgrade crunUpgrade podman-debuginfoUpgrade libslirp-develUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade git-lfsUpgrade runcUpgrade delveUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade libslirp-debuginfoUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade git-lfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-plugins-debuginfoUpgrade yggdrasilUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade go-toolsetUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade conmonUpgrade ipp-usb-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade yggdrasil-debugsourceUpgrade image-builder-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade image-builderUpgrade delve-debuginfoUpgrade toolbox-testsUpgrade podmanUpgrade ipp-usbUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade image-builder-debugsourceUpgrade git-lfs-debuginfoUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade yggdrasil-develUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade containers-commonUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade yggdrasil-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade golangUpgrade runc-debugsourceUpgrade opentelemetry-collectorUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade criu-libsUpgrade fuse-overlayfs-debugsource | Jul 7, 2026 | Jul 5, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.3Upgrade Splunk Enterprise to version 10.0.10Upgrade Splunk Enterprise to version 10.2.7Upgrade Splunk Enterprise to version 9.4.15 | Oct 20, 2026 | May 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub