Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade podman-gvproxyUpgrade criuUpgrade libslirpUpgrade podman-catatonitUpgrade golangUpgrade critUpgrade netavarkUpgrade toolbox-testsUpgrade runcUpgrade python3-criuUpgrade podman-testsUpgrade golang-docsUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade go-toolsetUpgrade golang-miscUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade udicaUpgrade podman-dockerUpgrade git-lfsUpgrade golang-srcUpgrade python3-podmanUpgrade grafanaUpgrade crunUpgrade containers-commonUpgrade container-selinuxUpgrade grafana-pcpUpgrade conmonUpgrade golang-testsUpgrade toolboxUpgrade golang-raceUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podmanUpgrade skopeoUpgrade skopeo-testsUpgrade libslirp-develUpgrade criu-develUpgrade podman-pluginsUpgrade delveUpgrade criu-libsUpgrade podman-remote | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-filesystemUpgrade golang-srcUpgrade golist-debuginfoUpgrade go-srpm-macrosUpgrade runc-debuginfoUpgrade runcUpgrade go-rpm-templatesUpgrade golang-docsUpgrade golangUpgrade golang-binUpgrade golang-github-gorilla-mux-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-godbus-dbus-develUpgrade golang-sharedUpgrade golang-googlecode-net-develUpgrade golang-googlecode-sqlite-develUpgrade go-rpm-macrosUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade golang-miscUpgrade golang-testsUpgrade golang-raceUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2manUpgrade golang-raceUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golist-debuginfoUpgrade golist | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade golang-srcUpgrade podman-pluginsUpgrade golang-miscUpgrade grafana-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade criu-libsUpgrade git-lfs-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade netavarkUpgrade conmonUpgrade python3-podmanUpgrade toolboxUpgrade libslirpUpgrade golangUpgrade golang-raceUpgrade conmon-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade runc-debuginfoUpgrade runcUpgrade podman-dockerUpgrade criu-develUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade delveUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade critUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade grafana-pcpUpgrade git-lfsUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade grafanaUpgrade git-lfs-debuginfoUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade go-toolsetUpgrade podman-remoteUpgrade conmon-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-srcUpgrade go-toolsetUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade skopeo-testsUpgrade delveUpgrade criu-develUpgrade criu-libsUpgrade git-lfsUpgrade container-selinuxUpgrade crunUpgrade podman-pluginsUpgrade conmonUpgrade python3-criuUpgrade grafanaUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade containers-commonUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade python3-podmanUpgrade golang-testsUpgrade podman-catatonitUpgrade grafana-pcpUpgrade udicaUpgrade buildah-testsUpgrade skopeoUpgrade critUpgrade golang-miscUpgrade golangUpgrade fuse-overlayfsUpgrade podmanUpgrade runcUpgrade golang-docsUpgrade podman-remoteUpgrade buildahUpgrade aardvark-dnsUpgrade golang-binUpgrade netavarkUpgrade criu | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade udicaUpgrade libslirpUpgrade skopeoUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade grafana-pcp-debuginfoUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade grafanaUpgrade critUpgrade conmonUpgrade golang-docsNo solution existsUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-testsUpgrade delve-debugsourceUpgrade libslirp-debuginfoUpgrade criu-develUpgrade git-lfsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade runcUpgrade git-lfs-debugsourceUpgrade buildah-debugsourceUpgrade go-toolsetUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade git-lfs-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade golang-testsUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade buildah-testsUpgrade golang-srcUpgrade conmon-debugsourceUpgrade golangUpgrade grafana-debuginfoUpgrade golang-raceUpgrade podmanUpgrade criuUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade cockpit-podmanUpgrade python3-podmanUpgrade buildahUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade netavarkUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade containers-commonUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcpUpgrade buildah-tests-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade python3-criuUpgrade libslirp-develUpgrade criu-debugsourceUpgrade critUpgrade golang-binUpgrade grafana-debuginfoUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade git-lfsUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-libsUpgrade grafanaUpgrade grafana-pcpUpgrade git-lfs-debuginfoUpgrade golangUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade libslirp-debugsourceUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debugsourceUpgrade golang-raceUpgrade criu-develUpgrade grafana-pcp-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-openssl-docUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub