Fluid Attacks Database

Description

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	golang	<0:1.26.3-1.el9_8	0:1.26.3-1.el9_8
rpm rhel10	golang	<0:1.26.3-4.el10_2	0:1.26.3-4.el10_2
rpm rhel10	ignition	-	-
rpm rhel10.0	golang	<0:1.26.5-1.el10_0	0:1.26.5-1.el10_0
rpm rhel9.6	ignition	<0:2.21.0-7.el9_6.1	0:2.21.0-7.el9_6.1
rpm rhel9	grafana	<0:10.2.6-23.el9_8.3	0:10.2.6-23.el9_8.3
rpm rhel10.0	grafana	<0:10.2.6-26.el10_0	0:10.2.6-26.el10_0
rpm rhel8	grafana	<0:9.2.10-33.el8_10	0:9.2.10-33.el8_10
rpm rhel10	gvisor-tap-vsock	-	-
rpm rhel9	gvisor-tap-vsock	-	-

1-10 of 36

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.