In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-dockerUpgrade podman-remoteUpgrade podman-gvproxy | Oct 31, 2022 | Jan 2, 2021 |
| Centos_linux | — | Upgrade podmanUpgrade podman-debuginfoUpgrade podman-gvproxyUpgrade podman-remoteUpgrade podman-testsUpgrade podman-dockerUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade git-lfsUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsource | Oct 26, 2022 | Jan 2, 2021 |
| Debian | — | Upgrade golang-golang-x-text | Jul 30, 2024 | Jan 2, 2021 |
| Oracle_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade git-lfsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman | Oct 26, 2022 | Jan 2, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operator | Mar 29, 2022 | Jan 2, 2021 |
| Redhat_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade git-lfsUpgrade git-lfs-debuginfoNo solution existsUpgrade podman-remoteUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade git-lfs-debugsourceUpgrade podmanUpgrade podman-dockerUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-gvproxy | Oct 26, 2022 | Jan 2, 2021 |
| Rocky_linux | — | Upgrade git-lfs-debugsourceUpgrade git-lfsUpgrade git-lfs-debuginfo | Mar 12, 2024 | Jan 2, 2021 |
| Ubuntu | — | Upgrade golang-x-text-devUpgrade golang-golang-x-text-dev | Mar 22, 2023 | Jan 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub