Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade go-toolsetUpgrade libslirp-develUpgrade udicaUpgrade skopeo-testsUpgrade container-selinuxUpgrade critUpgrade golang-binUpgrade cockpit-podmanUpgrade crunUpgrade podman-dockerUpgrade podman-pluginsUpgrade grafanaUpgrade runcUpgrade delveUpgrade golang-docsUpgrade criu-develUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade golang-testsUpgrade criuUpgrade golang-miscUpgrade python3-podmanUpgrade conmonUpgrade podman-catatonitUpgrade skopeoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade podmanUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade golangUpgrade netavarkUpgrade buildah-testsUpgrade podman-gvproxyUpgrade criu-libsUpgrade toolboxUpgrade libslirpUpgrade fuse-overlayfsUpgrade golang-raceUpgrade buildahUpgrade golang-src | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-github-gorilla-mux-develUpgrade golang-sharedUpgrade go-rpm-macrosUpgrade runcUpgrade golang-github-godbus-dbus-develUpgrade go-srpm-macrosUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-templatesUpgrade runc-debuginfoUpgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade golang-raceUpgrade golang-github-kr-pty-develUpgrade golang-github-gorilla-context-develUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-googlecode-sqlite-develUpgrade golang-testsUpgrade golang-srcUpgrade golist | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golist-debugsourceUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debugsource | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debugsourceUpgrade containers-commonUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade skopeo-testsUpgrade delveUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade grafanaUpgrade podman-testsUpgrade buildah-testsUpgrade conmonUpgrade netavarkUpgrade criu-libsUpgrade criu-develUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade delve-debuginfoUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade libslirpUpgrade criu-debuginfoUpgrade golang-raceUpgrade toolbox-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade skopeoUpgrade criu-debugsourceUpgrade podmanUpgrade podman-dockerUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade criuUpgrade toolbox-testsUpgrade toolboxUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade runcUpgrade python3-criuUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade skopeo-debugsourceUpgrade buildahUpgrade udicaUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade golang-bin | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade golang-srcUpgrade criu-libsUpgrade criu-develUpgrade containernetworking-pluginsUpgrade netavarkUpgrade skopeo-testsUpgrade golang-docsUpgrade golang-testsUpgrade critUpgrade golang-miscUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade delveUpgrade skopeoUpgrade libslirp-develUpgrade podman-remoteUpgrade golangUpgrade podman-pluginsUpgrade golang-binUpgrade runcUpgrade buildah-testsUpgrade udicaUpgrade podman-gvproxyUpgrade podman-dockerUpgrade libslirpUpgrade crunUpgrade criuUpgrade go-toolsetUpgrade container-selinuxUpgrade python3-podmanUpgrade conmonUpgrade python3-criuUpgrade fuse-overlayfsUpgrade podman-testsUpgrade buildahUpgrade slirp4netnsUpgrade golang-raceUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade grafana | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-remoteUpgrade podman-gvproxyUpgrade criu-libsUpgrade runcUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade aardvark-dnsUpgrade libslirpUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade buildahUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade grafanaUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade podman-dockerUpgrade golang-docsUpgrade delve-debuginfoUpgrade container-selinuxUpgrade go-toolsetUpgrade podman-testsUpgrade crun-debuginfoUpgrade buildah-testsUpgrade critUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golang-srcUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade podman-plugins-debuginfoUpgrade golangUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade grafana-debuginfoUpgrade golang-testsUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade skopeoUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade criu-develUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade toolboxNo solution existsUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade fuse-overlayfsUpgrade netavarkUpgrade criu-debuginfoUpgrade podmanUpgrade delve-debugsourceUpgrade golang-binUpgrade containers-common | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade slirp4netns-debugsourceUpgrade runcUpgrade skopeo-testsUpgrade criuUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade critUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade podmanUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade delveUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade skopeoUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade podman-remoteUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade podman-testsUpgrade toolbox-testsUpgrade grafanaUpgrade buildahUpgrade slirp4netnsUpgrade grafana-debuginfoUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade conmonUpgrade buildah-testsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade fuse-overlayfs | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18Upgrade go1.18-raceUpgrade go1.17-docUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub