Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-pluginsUpgrade crunUpgrade libslirpUpgrade containernetworking-pluginsUpgrade toolboxUpgrade git-lfsUpgrade container-selinuxUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade runcUpgrade conmonUpgrade podman-remoteUpgrade critUpgrade go-toolsetUpgrade udicaUpgrade criu-libsUpgrade python3-criuUpgrade containers-commonUpgrade delveUpgrade criu-develUpgrade golang-docsUpgrade grafanaUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-dockerUpgrade golang-miscUpgrade podmanUpgrade golang-srcUpgrade golang-binUpgrade toolbox-testsUpgrade podman-catatonitUpgrade golang-testsUpgrade golangUpgrade buildahUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade golang-raceUpgrade criuUpgrade grafana-pcpUpgrade netavark | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-godbus-dbus-develUpgrade go-rpm-macrosUpgrade golist-debuginfoUpgrade golang-raceUpgrade go-srpm-macrosUpgrade golistUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade golang-github-gorilla-context-develUpgrade golang-docsUpgrade golang-sharedUpgrade golang-github-syndtr-gocapability-develUpgrade golang-testsUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade golang-miscUpgrade go-filesystemUpgrade golang-srcUpgrade runcUpgrade runc-debuginfoUpgrade golang-googlecode-net-develUpgrade golang-binUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golistUpgrade golangUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golang-raceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-binUpgrade golang-sharedUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade go-toolsetUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade golangUpgrade buildah-debuginfoUpgrade critUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade buildah-testsUpgrade runc-debugsourceUpgrade udicaUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade golang-srcUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade golang-docsUpgrade buildahUpgrade git-lfsUpgrade aardvark-dnsUpgrade git-lfs-debuginfoUpgrade criuUpgrade criu-libsUpgrade podman-debuginfoUpgrade libslirp-develUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade golang-miscUpgrade grafana-pcpUpgrade golang-testsUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade podman-dockerUpgrade delve-debugsourceUpgrade libslirpUpgrade libslirp-debugsourceUpgrade criu-develUpgrade grafana-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golang-raceUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade python3-podmanUpgrade podman-testsUpgrade git-lfs-debugsourceUpgrade crunUpgrade conmonUpgrade toolbox-testsUpgrade delveUpgrade slirp4netnsUpgrade grafana-pcp-debuginfoUpgrade cockpit-podmanUpgrade netavarkUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeo-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade container-selinuxUpgrade containers-commonUpgrade criu-develUpgrade delveUpgrade grafanaUpgrade cockpit-podmanUpgrade go-toolsetUpgrade python3-podmanUpgrade podman-testsUpgrade aardvark-dnsUpgrade golang-srcUpgrade skopeo-testsUpgrade slirp4netnsUpgrade git-lfsUpgrade podman-gvproxyUpgrade criu-libsUpgrade crunUpgrade python3-criuUpgrade libslirp-develUpgrade libslirpUpgrade conmonUpgrade podman-dockerUpgrade udicaUpgrade fuse-overlayfsUpgrade runcUpgrade podman-catatonitUpgrade golang-testsUpgrade critUpgrade podman-pluginsUpgrade podmanUpgrade netavarkUpgrade grafana-pcpUpgrade buildahUpgrade criuUpgrade skopeoUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade golang-race | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade skopeoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade golangUpgrade buildah-testsUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade buildah-tests-debuginfoUpgrade runcUpgrade toolbox-testsUpgrade python3-podmanUpgrade criuUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade netavarkUpgrade delve-debugsourceUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade podman-debuginfoUpgrade golang-miscUpgrade criu-debuginfoUpgrade golang-binUpgrade git-lfs-debugsourceUpgrade skopeo-debuginfoUpgrade golang-srcUpgrade buildahUpgrade toolboxNo solution existsUpgrade udicaUpgrade podmanUpgrade golang-raceUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade git-lfs-debuginfoUpgrade grafana-pcp-debuginfoUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade golang-testsUpgrade grafana-debuginfoUpgrade conmonUpgrade golang-docsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade python3-criuUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade delve-debuginfoUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade crunUpgrade criu-develUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade grafanaUpgrade containers-commonUpgrade libslirpUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade git-lfsUpgrade podman-gvproxy-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade runcUpgrade grafana-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-testsUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade git-lfs-debugsourceUpgrade buildahUpgrade criuUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade golangUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcp-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade conmonUpgrade grafana-pcpUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade toolboxUpgrade skopeoUpgrade git-lfsUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade crunUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade libslirpUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade criu-develUpgrade delveUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolset | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.16-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub