A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade python3-criuUpgrade runcUpgrade skopeoUpgrade aardvark-dnsUpgrade udicaUpgrade podman-pluginsUpgrade crunUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade buildahUpgrade critUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podmanUpgrade toolboxUpgrade podman-remoteUpgrade butaneUpgrade netavarkUpgrade criuUpgrade libslirpUpgrade buildah-testsUpgrade containers-commonUpgrade cockpit-podmanUpgrade criu-develUpgrade weldr-clientUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade conmonUpgrade podman-testsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade slirp4netnsUpgrade python3-podmanUpgrade git-lfsUpgrade container-selinuxUpgrade skopeo-tests | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-raceUpgrade golang-sharedUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-testsUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-race | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade cockpit-composerUpgrade fuse-overlayfsUpgrade butaneUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade conmonUpgrade osbuild-lvm2Upgrade podman-testsUpgrade delveUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade delve-debugsourceUpgrade osbuild-selinuxUpgrade python3-podmanUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade golang-miscUpgrade golang-binUpgrade criu-debuginfoUpgrade crunUpgrade crun-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade skopeoUpgrade git-lfs-debugsourceUpgrade weldr-client-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade golang-raceUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade netavarkUpgrade weldr-client-tests-debuginfoUpgrade butane-debuginfoUpgrade toolboxUpgrade podmanUpgrade libslirpUpgrade podman-catatonitUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade osbuild-ostreeUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade golang-testsUpgrade containers-commonUpgrade weldr-clientUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade critUpgrade buildah-debuginfoUpgrade git-lfsUpgrade container-selinuxUpgrade python3-criuUpgrade runc-debuginfoUpgrade osbuild-luks2Upgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-tests-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade osbuildUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade butane-debugsourceUpgrade podman-dockerUpgrade cockpit-podmanUpgrade weldr-client-debuginfoUpgrade udicaUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade golang-docsUpgrade golangUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeo-debuginfoUpgrade runcUpgrade buildahUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade osbuild-composerUpgrade golang-srcUpgrade go-toolsetUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade osbuild-composer-debuginfoUpgrade python3-osbuild | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade osbuild-ostreeUpgrade git-lfsUpgrade delveUpgrade osbuild-composer-dnf-jsonUpgrade libslirp-develUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade go-toolsetUpgrade container-selinuxUpgrade osbuild-lvm2Upgrade python3-criuUpgrade libslirpUpgrade osbuild-luks2Upgrade osbuild-composer-workerUpgrade weldr-clientUpgrade crunUpgrade podman-pluginsUpgrade criu-develUpgrade golang-docsUpgrade oci-seccomp-bpf-hookUpgrade cockpit-composerUpgrade containers-commonUpgrade skopeo-testsUpgrade osbuild-selinuxUpgrade criu-libsUpgrade osbuildUpgrade python3-osbuildUpgrade buildahUpgrade udicaUpgrade osbuild-composer-coreUpgrade conmonUpgrade golang-testsUpgrade aardvark-dnsUpgrade podman-testsUpgrade buildah-testsUpgrade python3-podmanUpgrade golang-raceUpgrade skopeoUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade podmanUpgrade golang-miscUpgrade critUpgrade runcUpgrade podman-remoteUpgrade criuUpgrade golang-srcUpgrade golang-binUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade osbuild-composerUpgrade netavarkUpgrade golang | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade butaneUpgrade cri-oUpgrade ignitionUpgrade cri-tools | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-coreUpgrade podman-remoteUpgrade runcUpgrade butaneUpgrade criu-libsUpgrade containers-commonUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-selinuxUpgrade osbuild-ostreeUpgrade golang-miscUpgrade weldr-client-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade golang-raceUpgrade podman-pluginsUpgrade golang-binUpgrade delve-debuginfoUpgrade toolboxUpgrade netavarkUpgrade osbuildUpgrade cockpit-composerUpgrade skopeo-testsUpgrade udicaNo solution existsUpgrade podman-catatonitUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade criuUpgrade crunUpgrade podman-debuginfoUpgrade osbuild-lvm2Upgrade criu-develUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade conmon-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade skopeoUpgrade skopeo-debuginfoUpgrade go-toolsetUpgrade critUpgrade golangUpgrade buildah-tests-debuginfoUpgrade libslirpUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade golang-srcUpgrade buildah-debuginfoUpgrade podman-debugsourceUpgrade butane-debugsourceUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade weldr-clientUpgrade butane-debuginfoUpgrade podman-gvproxyUpgrade git-lfs-debuginfoUpgrade toolbox-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade python3-criuUpgrade weldr-client-tests-debuginfoUpgrade podman-testsUpgrade weldr-client-debuginfoUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade toolbox-testsUpgrade osbuild-composer-workerUpgrade podman-dockerUpgrade osbuild-composer-debuginfoUpgrade python3-osbuildUpgrade podman-gvproxy-debuginfoUpgrade osbuild-luks2Upgrade container-selinuxUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade libslirp-debuginfo | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade weldr-client-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade weldr-clientUpgrade criuUpgrade critUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade git-lfsUpgrade weldr-client-debugsourceUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade criu-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.17Upgrade go1.17-docUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-srcUpgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub