Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade libslirp-develUpgrade slirp4netnsUpgrade osbuild-luks2Upgrade python3-osbuildUpgrade python3-podmanUpgrade podman-testsUpgrade criu-develUpgrade conmonUpgrade libslirpUpgrade golangUpgrade go-toolsetUpgrade buildah-testsUpgrade delveUpgrade osbuild-depsolve-dnfUpgrade container-selinuxUpgrade containers-commonUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade osbuild-selinuxUpgrade cockpit-podmanUpgrade podman-dockerUpgrade podman-gvproxyUpgrade golang-srcUpgrade osbuild-composer-coreUpgrade crunUpgrade udicaUpgrade osbuild-composerUpgrade python3-criuUpgrade netavarkUpgrade skopeoUpgrade golang-binUpgrade toolbox-testsUpgrade osbuild-composer-workerUpgrade golang-testsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade runcUpgrade podmanUpgrade osbuild-ostreeUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade golang-docsUpgrade osbuild-lvm2Upgrade buildahUpgrade osbuildUpgrade critUpgrade toolbox | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade golang-docsUpgrade golang-sharedUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-misc | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade amazon-cloudwatch-agentUpgrade golang-miscUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade osbuild-luks2Upgrade cockpit-podmanUpgrade podman-remoteUpgrade golang-docsUpgrade osbuildUpgrade crunUpgrade runcUpgrade udicaUpgrade containernetworking-pluginsUpgrade golang-binUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade delveUpgrade python3-criuUpgrade criuUpgrade podman-pluginsUpgrade osbuild-composer-workerUpgrade podman-testsUpgrade slirp4netnsUpgrade critUpgrade golang-testsUpgrade skopeoUpgrade skopeo-testsUpgrade osbuild-composerUpgrade podmanUpgrade criu-develUpgrade buildah-testsUpgrade osbuild-lvm2Upgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade libslirp-develUpgrade conmonUpgrade libslirpUpgrade go-toolsetUpgrade golangUpgrade aardvark-dnsUpgrade golang-miscUpgrade osbuild-ostreeUpgrade python3-osbuildUpgrade golang-srcUpgrade fuse-overlayfsUpgrade criu-libsUpgrade containers-commonUpgrade osbuild-composer-coreUpgrade buildahUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade osbuild-depsolve-dnf | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade golangUpgrade golang-binUpgrade python3-osbuildUpgrade podmanUpgrade buildahUpgrade aardvark-dnsUpgrade golang-miscUpgrade osbuild-composer-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-depsolve-dnfUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade osbuild-luks2Upgrade criu-debugsourceUpgrade runc-debugsourceUpgrade golang-testsUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade osbuild-composerUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade podman-dockerUpgrade golang-srcUpgrade osbuild-composer-tests-debuginfoUpgrade python3-podmanUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade buildah-testsUpgrade fuse-overlayfsNo solution existsUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade osbuild-composer-coreUpgrade netavarkUpgrade podman-remoteUpgrade osbuild-lvm2Upgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-workerUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade podman-pluginsUpgrade osbuild-composer-debugsourceUpgrade crunUpgrade podman-remote-debuginfoUpgrade conmonUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade delveUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuildUpgrade osbuild-ostreeUpgrade skopeo-testsUpgrade libslirp-develUpgrade python3-criuUpgrade osbuild-selinuxUpgrade runcUpgrade libslirpUpgrade osbuild-composer-worker-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade critUpgrade crun-debuginfoUpgrade skopeoUpgrade runc-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debugsource | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade crun-debuginfoUpgrade netavarkUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debuginfoUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade buildahUpgrade buildah-debugsourceUpgrade go-toolsetUpgrade toolboxUpgrade conmonUpgrade podman-gvproxyUpgrade buildah-debuginfoUpgrade containers-commonUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade libslirp-develUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade slirp4netns-debugsourceUpgrade toolbox-debugsourceUpgrade delveUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade criu-develUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade criuUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade podman-remoteUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade libslirp-debugsourceUpgrade golang-binUpgrade python3-criuUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade delve-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.9 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.24-client-commonUpgrade trivyUpgrade go1.22-openssl-docUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.28-client-bash-completionUpgrade go1.23-openssl-docUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.26-clientUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.27-proxyUpgrade go1.22Upgrade go1.23-opensslUpgrade kubernetes1.26-proxyUpgrade go1.21-opensslUpgrade kubernetes1.28-clientUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.28-kubelet-commonUpgrade go1.23-raceUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.27-clientUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.24-schedulerUpgrade go1.23Upgrade kubernetes1.25-client-commonUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.26-kubelet-commonUpgrade go1.22-docUpgrade kubernetes1.24-clientUpgrade go1.23-docUpgrade go1.22-raceUpgrade go1.22-openssl-raceUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.24-controller-managerUpgrade go1.21-openssl-docUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.25-clientUpgrade kubernetes1.25-client-fish-completionUpgrade go1.21-openssl-raceUpgrade kubernetes1.28-proxyUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.25-kubeletUpgrade go1.23-openssl-raceUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-proxyUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.25-client-bash-completionUpgrade go1.22-openssl | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-srcUpgrade golang-1.17Upgrade golang-1.18-goUpgrade golang-1.22Upgrade golang-1.17-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.22-goUpgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro) | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub