Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-raceUpgrade golang-testsUpgrade delveUpgrade golang-srcUpgrade golang-miscUpgrade golang-docsUpgrade go-toolsetUpgrade golang-binUpgrade golang | May 13, 2022 | Oct 18, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-srcUpgrade golang-bin | Jul 4, 2022 | Oct 18, 2021 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Oct 18, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-sharedUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-tests | Feb 17, 2025 | Oct 7, 2021 |
| Centos_linux | — | Upgrade golang-miscUpgrade delve-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-raceUpgrade delveUpgrade go-toolsetUpgrade golang-docsUpgrade delve-debuginfo | May 13, 2022 | Oct 18, 2021 |
| Debian | — | Upgrade golang-1.15 | Apr 21, 2023 | Oct 18, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Oct 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 28, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Feb 24, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 4, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Dec 28, 2021 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 28, 2022 | Oct 18, 2021 |
| Oracle_linux | — | Upgrade delveUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-docsUpgrade go-toolsetUpgrade golang-race | May 18, 2022 | Oct 7, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade golang-raceUpgrade golang-miscUpgrade go-toolsetUpgrade golangUpgrade golang-srcNo solution existsUpgrade golang-binUpgrade golang-docsUpgrade delve-debugsourceUpgrade delveUpgrade golang-tests | May 13, 2022 | Oct 18, 2021 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade delve-debuginfoUpgrade delveUpgrade golang-raceUpgrade golangUpgrade delve-debugsourceUpgrade golang-bin | Mar 5, 2024 | Oct 18, 2021 |
| Suse | — | Upgrade go1.17-docUpgrade go1.17Upgrade go1.16-docUpgrade go1.17-raceUpgrade go1.16Upgrade go1.16-race | Oct 21, 2021 | Oct 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub