regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golang-sharedUpgrade golang-docsUpgrade golang-race | Sep 30, 2022 | Mar 5, 2022 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Mar 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Mar 3, 2022 |
| Centos_linux | — | Upgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade delve-debugsourceUpgrade delve | Nov 9, 2022 | Mar 5, 2022 |
| Debian | — | Upgrade golang-1.15 | Apr 29, 2022 | Mar 5, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Mar 19, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 7, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jun 16, 2022 | Mar 5, 2022 |
| Oracle_linux | — | Upgrade olcne-prometheus-chartUpgrade olcne-grafana-chartUpgrade golang-docsUpgrade olcne-api-serverUpgrade istio-istioctlUpgrade golang-testsUpgrade olcne-gluster-chartUpgrade olcne-istio-chartUpgrade olcne-olm-chartUpgrade olcne-utilsUpgrade golang-binUpgrade go-toolsetUpgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade olcne-agentUpgrade delveUpgrade olcnectlUpgrade olcne-oci-csi-chartUpgrade istioUpgrade golang-miscUpgrade olcne-nginx | May 10, 2022 | Mar 3, 2022 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-oUpgrade butaneUpgrade cri-toolsUpgrade ignition | Aug 2, 2022 | Mar 3, 2022 |
| Redhat_linux | — | Upgrade delveUpgrade golang-docsUpgrade go-toolsetUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-miscNo solution existsUpgrade golangUpgrade golang-testsUpgrade delve-debuginfo | Nov 9, 2022 | Mar 5, 2022 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade delveUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade golang | Mar 12, 2024 | Mar 5, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Mar 5, 2022 |
| Suse | — | Upgrade go1.17-raceUpgrade go1.16-docUpgrade go1.17-docUpgrade go1.16-raceUpgrade go1.16Upgrade go1.17 | Oct 26, 2022 | Mar 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub