Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade grafanaUpgrade grafana-pcpUpgrade container-selinuxUpgrade crunUpgrade criu-libsUpgrade golang-docsUpgrade libslirpUpgrade slirp4netnsUpgrade podman-remoteUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-pluginsUpgrade go-toolsetUpgrade delveUpgrade criu-develUpgrade python3-criuUpgrade podman-gvproxyUpgrade netavarkUpgrade golang-binUpgrade golang-raceUpgrade toolboxUpgrade conmonUpgrade python3-podmanUpgrade podman-testsUpgrade buildah-testsUpgrade podman-catatonitUpgrade skopeoUpgrade cockpit-podmanUpgrade criuUpgrade udicaUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade buildahUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade runcUpgrade golang-miscUpgrade golangUpgrade toolbox-testsUpgrade golang-srcUpgrade golang-testsUpgrade podman | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-github-gorilla-context-develUpgrade runcUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-googlecode-net-develUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-macrosUpgrade golist-debuginfoUpgrade go-filesystemUpgrade golang-github-godbus-dbus-develUpgrade golang-miscUpgrade golangUpgrade golang-github-syndtr-gocapability-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golang-miscUpgrade golangUpgrade golang-github-cpuguy83-md2man-develUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-testsUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golang-srcUpgrade golang-bin | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade golang-miscUpgrade delve-debuginfoUpgrade podman-testsUpgrade python3-podmanUpgrade buildah-debugsourceUpgrade golang-srcUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade libslirpUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-debugsourceUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade criu-libsUpgrade podman-pluginsUpgrade conmonUpgrade crunUpgrade toolboxUpgrade criu-debuginfoUpgrade golangUpgrade grafanaUpgrade golang-binUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade podman-catatonitUpgrade go-toolsetUpgrade delveUpgrade criuUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade aardvark-dnsUpgrade skopeoUpgrade libslirp-debuginfoUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade crun-debugsourceUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade podman-debuginfoUpgrade critUpgrade buildahUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade grafana-pcpUpgrade podmanUpgrade container-selinuxUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade python3-criuUpgrade criu-libsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade grafanaUpgrade podman-pluginsUpgrade conmonUpgrade skopeo-testsUpgrade libslirpUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade crunUpgrade golang-srcUpgrade go-toolsetUpgrade containers-commonUpgrade podman-testsUpgrade criu-develUpgrade delveUpgrade podman-dockerUpgrade podmanUpgrade golang-miscUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade golangUpgrade aardvark-dnsUpgrade udicaUpgrade golang-raceUpgrade criuUpgrade skopeoUpgrade critUpgrade grafana-pcpUpgrade golang-testsUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildahUpgrade golang-binUpgrade netavarkUpgrade buildah-testsUpgrade python3-podmanUpgrade podman-remoteUpgrade runc | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade buildahUpgrade slirp4netnsUpgrade kernel-rtUpgrade ignitionUpgrade cri-toolsUpgrade haproxyUpgrade fuse-overlayfsUpgrade runcUpgrade podmanUpgrade skopeoUpgrade crunUpgrade containers-commonUpgrade toolboxUpgrade cri-oUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade butaneUpgrade conmonUpgrade openshift-clients | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade slirp4netns-debuginfoUpgrade delve-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade go-toolsetUpgrade skopeo-debugsourceUpgrade grafanaUpgrade toolbox-debuginfoUpgrade grafana-pcp-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade golang-binUpgrade critUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade runcUpgrade buildah-debuginfoUpgrade golangUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade golang-docsUpgrade golang-srcNo solution existsUpgrade grafana-pcpUpgrade cockpit-podmanUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade libslirp-develUpgrade podman-remoteUpgrade container-selinuxUpgrade aardvark-dnsUpgrade containers-commonUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade skopeoUpgrade golang-miscUpgrade podman-remote-debuginfoUpgrade conmonUpgrade toolboxUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade criuUpgrade libslirpUpgrade delveUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade podman-dockerUpgrade delve-debugsourceUpgrade python3-podmanUpgrade golang-raceUpgrade netavarkUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade skopeo-debuginfoUpgrade podman | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade crunUpgrade podmanUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade libslirpUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade grafana-pcp-debuginfoUpgrade podman-catatonitUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade buildah-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade golang-binUpgrade crun-debugsourceUpgrade golangUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade go-toolsetUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade grafana-pcpUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade critUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade containers-commonUpgrade slirp4netns-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-docUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.18-openssl | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-goUpgrade golang-1.13-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub