In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade git-lfsUpgrade podman-remoteUpgrade podman-dockerUpgrade podman | Oct 31, 2022 | Jan 2, 2021 |
| Centos_linux | — | Upgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-remoteUpgrade git-lfsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade git-lfs-debuginfoUpgrade podman-plugins | Oct 26, 2022 | Jan 2, 2021 |
| Debian | — | Upgrade golang-golang-x-text | Jul 30, 2024 | Jan 2, 2021 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade podman-pluginsUpgrade podmanUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-remoteUpgrade git-lfs | Oct 26, 2022 | Jan 2, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operator | Mar 29, 2022 | Jan 2, 2021 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade git-lfsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade podman-dockerNo solution existsUpgrade git-lfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade git-lfs-debugsourceUpgrade podman-gvproxy | Oct 26, 2022 | Jan 2, 2021 |
| Rocky_linux | — | Upgrade git-lfs-debuginfoUpgrade git-lfsUpgrade git-lfs-debugsource | Mar 12, 2024 | Jan 2, 2021 |
| Ubuntu | — | Upgrade golang-x-text-devUpgrade golang-golang-x-text-dev | Mar 22, 2023 | Jan 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub