Fluid Attacks Database

Description

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10	oci-seccomp-bpf-hook	-	-
rpm rhel9	butane	-	-
rpm rhel10	golang-github-openprinting-ipp-usb	<0:0.9.27-7.el10_2.2	0:0.9.27-7.el10_2.2
rpm rhel10	image-builder	<0:52.1-1.el10_2.2	0:52.1-1.el10_2.2
rpm rhel9	git-lfs	<0:3.7.1-4.el9_8.2	0:3.7.1-4.el9_8.2
rpm rhel10	go-fdo-client	-	-
rpm rhel10	gvisor-tap-vsock	-	-
rpm rhel9	oci-seccomp-bpf-hook	<0:1.2.11-2.el9_8	0:1.2.11-2.el9_8
rpm rhel9	rhel-9.6-bootc-image-builder	-	-
rpm rhel10.0	delve	<0:1.26.1-1.el10_0	0:1.26.1-1.el10_0

1-10 of 54

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.