Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade golang-testsUpgrade containers-commonUpgrade python3-podmanUpgrade conmonUpgrade grafanaUpgrade crunUpgrade golang-raceUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade toolboxUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade criu-develUpgrade grafana-pcpUpgrade criu-libsUpgrade libslirp-develUpgrade podmanUpgrade podman-pluginsUpgrade skopeoUpgrade podman-remoteUpgrade runcUpgrade golang-miscUpgrade golangUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade git-lfsUpgrade libslirpUpgrade buildahUpgrade buildah-testsUpgrade golang-srcUpgrade cockpit-podmanUpgrade go-toolsetUpgrade podman-testsUpgrade udicaUpgrade critUpgrade netavarkUpgrade golang-docsUpgrade python3-criuUpgrade criuUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-docker | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-googlecode-net-develUpgrade golang-googlecode-sqlite-develUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-macrosUpgrade golangUpgrade golang-docsUpgrade go-rpm-templatesUpgrade golang-binUpgrade runc-debuginfoUpgrade golang-srcUpgrade go-filesystemUpgrade golang-github-gorilla-mux-develUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golang-sharedUpgrade runcUpgrade golang-miscUpgrade golistUpgrade golang-testsUpgrade golang-github-gorilla-context-develUpgrade golang-github-kr-pty-develUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-sharedUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golist-debugsourceUpgrade golang-raceUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade golang-docs | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade netavarkUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade python3-podmanUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade conmonUpgrade skopeoUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade golang-miscUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade buildahUpgrade grafana-debuginfoUpgrade criuUpgrade containers-commonUpgrade buildah-debuginfoUpgrade toolboxUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade golang-srcUpgrade podman-testsUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade golangUpgrade golang-raceUpgrade udicaUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade runcUpgrade criu-develUpgrade criu-debugsourceUpgrade podmanUpgrade grafanaUpgrade git-lfs-debuginfoUpgrade podman-dockerUpgrade golang-docsUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade crunUpgrade toolbox-testsUpgrade delveUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade grafana-pcpUpgrade git-lfs | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade delveUpgrade libslirpUpgrade skopeo-testsUpgrade golang-srcUpgrade podman-testsUpgrade grafanaUpgrade python3-criuUpgrade libslirp-develUpgrade container-selinuxUpgrade crunUpgrade slirp4netnsUpgrade criu-libsUpgrade go-toolsetUpgrade git-lfsUpgrade containers-commonUpgrade podman-gvproxyUpgrade criu-develUpgrade cockpit-podmanUpgrade conmonUpgrade podman-pluginsUpgrade python3-podmanUpgrade podman-dockerUpgrade buildah-testsUpgrade skopeoUpgrade podman-remoteUpgrade buildahUpgrade aardvark-dnsUpgrade golang-binUpgrade runcUpgrade netavarkUpgrade criuUpgrade grafana-pcpUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade udicaUpgrade golang-docsUpgrade fuse-overlayfsUpgrade podmanUpgrade golang-miscUpgrade golangUpgrade critUpgrade podman-catatonitUpgrade golang-tests | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade containers-commonUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade netavarkUpgrade criu-libsUpgrade criu-debuginfoUpgrade git-lfs-debuginfoUpgrade golang-testsUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade python3-podmanUpgrade golang-raceUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade buildahUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade golangUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade criuUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade grafana-pcpUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade runcUpgrade git-lfs-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade skopeoUpgrade udicaUpgrade podman-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade delve-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade critUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade delveUpgrade podman-testsUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debugsourceUpgrade libslirpUpgrade toolbox-debuginfoUpgrade toolboxUpgrade podman-dockerNo solution existsUpgrade grafana-pcp-debuginfoUpgrade go-toolset | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade python3-criuUpgrade grafana-debuginfoUpgrade libslirp-develUpgrade grafana-pcpUpgrade golangUpgrade go-toolsetUpgrade criu-libsUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade golang-binUpgrade grafanaUpgrade critUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade criuUpgrade grafana-pcp-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade criu-develUpgrade golang-raceUpgrade delve-debugsourceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.17Upgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.17-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.13-goUpgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub