An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade runfinch-finchUpgrade nerdctl | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade amazon-cloudwatch-agentUpgrade rclone-debuginfoUpgrade rcloneUpgrade containerdUpgrade containerd-stress-debuginfoUpgrade containerd-stressUpgrade containerd-debugsourceUpgrade rclone-debugsourceUpgrade containerd-debuginfoUpgrade nerdctl | Jun 9, 2026 | May 22, 2026 |
| Redhat Openshift | — | Upgrade openshift | Aug 17, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade flightctl-selinuxNo solution existsUpgrade flightctl-cliUpgrade flightctl-agentUpgrade flightctl-servicesUpgrade flightctl-observability | Jul 17, 2026 | May 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub