Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade golang-binUpgrade criu-develUpgrade crunUpgrade critUpgrade golang-docsUpgrade podman-pluginsUpgrade libslirp-develUpgrade go-toolsetUpgrade python3-criuUpgrade grafanaUpgrade runcUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade delveUpgrade udicaUpgrade container-selinuxUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade podman-testsUpgrade buildah-testsUpgrade python3-podmanUpgrade podman-catatonitUpgrade netavarkUpgrade toolbox-testsUpgrade golang-testsUpgrade libslirpUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podmanUpgrade conmonUpgrade criu-libsUpgrade golang-raceUpgrade criuUpgrade skopeoUpgrade golangUpgrade toolboxUpgrade golang-miscUpgrade buildah | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-godbus-dbus-develUpgrade golang-github-gorilla-mux-develUpgrade golang-sharedUpgrade go-srpm-macrosUpgrade go-filesystemUpgrade golist-debuginfoUpgrade go-rpm-templatesUpgrade runc-debuginfoUpgrade golang-docsUpgrade go-rpm-macrosUpgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-github-gorilla-context-develUpgrade golang-raceUpgrade golang-miscUpgrade golang-googlecode-sqlite-develUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golistUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-testsUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golistUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-shared | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade containers-commonUpgrade golang-miscUpgrade libslirp-develUpgrade netavarkUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade buildah-testsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade crun-debuginfoUpgrade conmonUpgrade grafanaUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade podman-testsUpgrade python3-podmanUpgrade golang-srcUpgrade libslirpUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netnsUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade slirp4netns-debugsourceUpgrade golang-docsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade fuse-overlayfsUpgrade udicaUpgrade python3-criuUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade buildahUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade critUpgrade podman-dockerUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podman-remoteUpgrade crun-debugsourceUpgrade grafana-debuginfoUpgrade toolboxUpgrade runcUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade containernetworking-pluginsUpgrade skopeoUpgrade criuUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade grafanaUpgrade libslirpUpgrade cockpit-podmanUpgrade criuUpgrade python3-podmanUpgrade container-selinuxUpgrade crunUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade conmonUpgrade go-toolsetUpgrade podman-dockerUpgrade udicaUpgrade buildah-testsUpgrade slirp4netnsUpgrade buildahUpgrade python3-criuUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade golang-docsUpgrade podman-catatonitUpgrade criu-libsUpgrade critUpgrade criu-develUpgrade golang-testsUpgrade golang-srcUpgrade skopeo-testsUpgrade podmanUpgrade runcUpgrade delveUpgrade skopeoUpgrade golang-binUpgrade netavarkUpgrade golang-miscUpgrade podman-remoteUpgrade podman-pluginsUpgrade containers-commonUpgrade libslirp-devel | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade podman-remoteUpgrade cockpit-podmanUpgrade container-selinuxUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade criu-libsUpgrade toolbox-testsUpgrade runcUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade libslirpUpgrade critUpgrade golang-srcUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade golangUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade criuUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade golang-raceUpgrade podmanUpgrade conmon-debugsourceUpgrade criu-develNo solution existsUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade containers-commonUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade toolbox-debugsourceUpgrade python3-podmanUpgrade crun-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade toolboxUpgrade conmonUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade podman-remote-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade golang-raceUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade go-toolsetUpgrade grafana-debuginfoUpgrade grafanaUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade conmonUpgrade buildahUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade crunUpgrade fuse-overlayfsUpgrade libslirpUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade golangUpgrade criu-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade libslirp-develUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade criuUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade delveUpgrade toolbox-debuginfoUpgrade skopeoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade containers-commonUpgrade python3-criuUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade toolboxUpgrade golang-bin | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.17-docUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub