Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-pcpUpgrade toolbox-testsUpgrade runcUpgrade podman-pluginsUpgrade critUpgrade golang-testsUpgrade buildahUpgrade crunUpgrade skopeoUpgrade golang-docsUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-remoteUpgrade golang-miscUpgrade netavarkUpgrade python3-podmanUpgrade podmanUpgrade podman-catatonitUpgrade criuUpgrade toolboxUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade criu-develUpgrade libslirpUpgrade skopeo-testsUpgrade containers-commonUpgrade criu-libsUpgrade container-selinuxUpgrade grafanaUpgrade slirp4netnsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade python3-criuUpgrade delveUpgrade buildah-testsUpgrade cockpit-podmanUpgrade git-lfsUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxy | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade golistUpgrade golang-binUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-github-kr-pty-develUpgrade golang-testsUpgrade runcUpgrade golangUpgrade go-srpm-macrosUpgrade golang-miscUpgrade golang-raceUpgrade golang-github-gorilla-context-develUpgrade go-rpm-macrosUpgrade golang-docsUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-templates | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-binUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golangUpgrade golang-srcUpgrade golistUpgrade golang-github-cpuguy83-md2manUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-sharedUpgrade golist-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade critUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade criuUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debuginfoUpgrade udicaUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade git-lfs-debuginfoUpgrade buildah-testsUpgrade skopeoUpgrade golang-srcUpgrade criu-libs-debuginfoUpgrade runcUpgrade buildahUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade libslirpUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade criu-libsUpgrade cockpit-podmanUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade toolbox-testsUpgrade podman-testsUpgrade golang-miscUpgrade netavarkUpgrade toolboxUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafana-debuginfoUpgrade git-lfsUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade crunUpgrade golang-raceUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-develUpgrade conmon-debugsourceUpgrade delveUpgrade podman-docker | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Oracle_linux | — | Upgrade grafanaUpgrade cockpit-podmanUpgrade go-toolsetUpgrade podman-gvproxyUpgrade netavarkUpgrade container-selinuxUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-testsUpgrade python3-podmanUpgrade libslirpUpgrade buildahUpgrade conmonUpgrade podman-dockerUpgrade crunUpgrade git-lfsUpgrade golang-raceUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade python3-criuUpgrade skopeoUpgrade golang-docsUpgrade golangUpgrade criu-libsUpgrade containers-commonUpgrade runcUpgrade golang-srcUpgrade golang-binUpgrade fuse-overlayfsUpgrade criu-develUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade critUpgrade golang-miscUpgrade grafana-pcpUpgrade podman-pluginsUpgrade delveUpgrade criuUpgrade golang-tests | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golang-docsUpgrade toolbox-debuginfoUpgrade buildah-debuginfoNo solution existsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade git-lfs-debuginfoUpgrade criu-libsUpgrade golang-testsUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade criu-debugsourceUpgrade delve-debuginfoUpgrade golang-srcUpgrade python3-criuUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade grafana-pcpUpgrade golangUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade critUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade criuUpgrade podman-catatonitUpgrade runcUpgrade buildahUpgrade runc-debugsourceUpgrade netavarkUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-dockerUpgrade toolboxUpgrade conmonUpgrade go-toolsetUpgrade toolbox-testsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade containernetworking-plugins-debugsourceUpgrade git-lfsUpgrade skopeo-debugsourceUpgrade delveUpgrade skopeo-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade python3-podmanUpgrade buildah-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golang-raceUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade conmon-debugsourceUpgrade golang-miscUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade crunUpgrade criu-devel | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criu-libsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade grafana-pcpUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debuginfoUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade delveUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade buildahUpgrade podman-remoteUpgrade git-lfsUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade grafanaUpgrade skopeo-testsUpgrade critUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade criu-debuginfoUpgrade crunUpgrade containers-commonUpgrade libslirpUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade golang-raceUpgrade podmanUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade toolboxUpgrade criu-develUpgrade podman-pluginsUpgrade toolbox-testsUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade git-lfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade toolbox-debugsourceUpgrade conmonUpgrade buildah-debugsourceUpgrade golangUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade grafana-pcp-debuginfoUpgrade crun-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-raceUpgrade go1.17Upgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-raceUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.13-goUpgrade golang-1.18-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub