Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-docs | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade delve-debugsourceUpgrade golang-raceUpgrade golang-binUpgrade delveUpgrade golang-srcUpgrade delve-debuginfoUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade go-toolsetUpgrade golang | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade istio-mixcUpgrade prometheusUpgrade istio-mixsUpgrade docker-engineUpgrade docker-cliUpgrade etcdUpgrade golangUpgrade conmonUpgrade golang-binUpgrade golang-srcUpgrade olcne-nginxUpgrade istio-pilot-agentUpgrade cri-toolsUpgrade kata-agentUpgrade kubeletUpgrade golang-raceUpgrade kubectlUpgrade kubeadmUpgrade istio-citadelUpgrade kubernetes-dashboardUpgrade kubernetes-cniUpgrade kata-proxyUpgrade kataUpgrade kata-imageUpgrade istio-galleyUpgrade olcne-agentUpgrade olcne-istio-chartUpgrade helmUpgrade olcne-api-serverUpgrade golang-miscUpgrade golang-testsUpgrade istio-sidecar-injectorUpgrade kata-runtimeUpgrade olcne-prometheus-chartUpgrade golang-docsUpgrade istio-istioctlUpgrade grafanaUpgrade kubeadm-ha-setupUpgrade cri-oUpgrade delveUpgrade yqUpgrade istio-proxy-initUpgrade kata-shimUpgrade istio-node-agentUpgrade go-toolsetUpgrade flannelUpgrade olcne-utilsUpgrade olcnectlUpgrade kubernetes-cni-pluginsUpgrade istioUpgrade corednsUpgrade kata-ksm-throttlerUpgrade istio-pilot-discovery | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshiftUpgrade machine-config-daemonUpgrade cri-oUpgrade golang-github-prometheus-promuUpgrade redhat-release-coreosUpgrade ignitionUpgrade kubefed-clientUpgrade atomic-enterprise-service-catalogUpgrade faqUpgrade cri-toolsUpgrade jenkins-2-pluginsUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade skopeoUpgrade runcUpgrade openshift-eventrouterUpgrade apbUpgrade buildahUpgrade containernetworking-plugins | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | No solution existsUpgrade golang-binUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-docsUpgrade delveUpgrade golang-srcUpgrade delve-debuginfoUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade go-toolset | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.14-docUpgrade go1.14-raceUpgrade go1.13-raceUpgrade go1.14Upgrade go1.13-docUpgrade go1.13 | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13 | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub