CVE-2026-33811

ADVISORY - nist

Summary

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

EPSS Score⁠: 0.00813 (0.536)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1341⁠

Multiple Releases of Same Resource or Handle

CWE-415⁠

Double Free

Impacted images

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.