A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade containers-commonUpgrade weldr-clientUpgrade libslirp-develUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade python3-podmanUpgrade criu-libsUpgrade libslirpUpgrade criu-develUpgrade container-selinuxUpgrade podman-testsUpgrade git-lfsUpgrade conmonUpgrade podman-catatonitUpgrade butaneUpgrade critUpgrade netavarkUpgrade toolbox-testsUpgrade crunUpgrade buildahUpgrade toolboxUpgrade fuse-overlayfsUpgrade python3-criuUpgrade udicaUpgrade skopeoUpgrade criuUpgrade podman-dockerUpgrade podmanUpgrade runcUpgrade podman-pluginsUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade aardvark-dns | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golang-src | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-raceUpgrade golang-docsUpgrade golang-sharedUpgrade golang-bin | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade criu-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade git-lfs-debuginfoUpgrade buildahUpgrade udicaUpgrade weldr-client-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade golangUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-dockerUpgrade osbuild-composerUpgrade podman-remoteUpgrade butane-debugsourceUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade python3-osbuildUpgrade podman-gvproxyUpgrade osbuild-composer-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade runcUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade git-lfsUpgrade skopeo-debuginfoUpgrade container-selinuxUpgrade weldr-clientUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade osbuildUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade golang-srcUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-luks2Upgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade weldr-client-tests-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsourceUpgrade buildah-debugsourceUpgrade crunUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-ostreeUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade libslirpUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade golang-testsUpgrade butane-debuginfoUpgrade toolboxUpgrade golang-binUpgrade criuUpgrade conmon-debugsourceUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade osbuild-selinuxUpgrade weldr-client-debugsourceUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade osbuild-lvm2Upgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade butaneUpgrade conmonUpgrade cockpit-composerUpgrade python3-podmanUpgrade delve-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-miscUpgrade skopeoUpgrade osbuild-composer-core-debuginfo | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade aardvark-dnsUpgrade buildah-testsUpgrade netavarkUpgrade osbuild-composerUpgrade golang-testsUpgrade udicaUpgrade podman-catatonitUpgrade skopeoUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade podmanUpgrade podman-dockerUpgrade python3-podmanUpgrade golang-srcUpgrade podman-remoteUpgrade runcUpgrade criuUpgrade python3-osbuildUpgrade critUpgrade conmonUpgrade podman-testsUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade buildahUpgrade fuse-overlayfsUpgrade osbuildUpgrade osbuild-composer-coreUpgrade golang-binUpgrade skopeo-testsUpgrade container-selinuxUpgrade osbuild-selinuxUpgrade delveUpgrade weldr-clientUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade osbuild-luks2Upgrade golang-docsUpgrade crunUpgrade osbuild-composer-workerUpgrade osbuild-lvm2Upgrade python3-criuUpgrade podman-gvproxyUpgrade git-lfsUpgrade containers-commonUpgrade cockpit-composerUpgrade podman-pluginsUpgrade slirp4netnsUpgrade criu-develUpgrade libslirpUpgrade criu-libsUpgrade osbuild-ostreeUpgrade osbuild-composer-dnf-json | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade butaneUpgrade cri-oUpgrade cri-toolsUpgrade ignition | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade weldr-clientUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsUpgrade osbuild-luks2Upgrade git-lfsUpgrade osbuild-composer-worker-debuginfoUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-workerUpgrade butane-debuginfoUpgrade container-selinuxUpgrade podman-testsUpgrade buildahUpgrade libslirpUpgrade weldr-client-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade go-toolsetUpgrade golang-docsUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade golang-srcUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade python3-osbuildUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade butane-debugsourceUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade golangUpgrade osbuild-composer-debuginfoUpgrade critUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade osbuild-composer-core-debuginfoUpgrade git-lfs-debuginfoUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade toolboxUpgrade podman-remoteUpgrade golang-miscUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade skopeoUpgrade toolbox-debugsourceUpgrade python3-podmanUpgrade osbuild-composer-dnf-jsonUpgrade butaneUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libs-debuginfoUpgrade weldr-client-debugsourceUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podmanUpgrade osbuild-ostreeUpgrade slirp4netns-debugsourceUpgrade golang-testsUpgrade conmonUpgrade criu-develUpgrade containers-commonUpgrade libslirp-develUpgrade delve-debuginfoNo solution existsUpgrade buildah-debugsourceUpgrade criu-libsUpgrade osbuild-composer-tests-debuginfoUpgrade podman-pluginsUpgrade udicaUpgrade crunUpgrade crun-debugsourceUpgrade git-lfs-debugsourceUpgrade conmon-debugsourceUpgrade osbuildUpgrade cockpit-composerUpgrade skopeo-testsUpgrade osbuild-lvm2Upgrade osbuild-composer-coreUpgrade netavarkUpgrade osbuild-selinuxUpgrade podman-catatonit-debuginfo | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade libslirp-develUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade weldr-client-debugsourceUpgrade criuUpgrade git-lfs-debuginfoUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade critUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade weldr-client-debuginfoUpgrade python3-criuUpgrade weldr-clientUpgrade libslirp-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub