vulnerability

Amazon Linux AMI 2: CVE-2022-30635: Security patch for go-rpm-macros, golang, golang-github-godbus-dbus, golang-github-gorilla-context, golang-github-gorilla-mux, golang-github-kr-pty, golang-github-syndtr-gocapability, golang-googlecode-net, golang-googlecode-sqlite, golist, runc (Multiple Advisories)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
2022-08-10
Added
2022-10-11
Modified
2025-04-30

Description

Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.

Solution(s)

amazon-linux-ami-2-upgrade-go-filesystemamazon-linux-ami-2-upgrade-go-rpm-macrosamazon-linux-ami-2-upgrade-go-rpm-templatesamazon-linux-ami-2-upgrade-go-srpm-macrosamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-github-godbus-dbus-develamazon-linux-ami-2-upgrade-golang-github-gorilla-context-develamazon-linux-ami-2-upgrade-golang-github-gorilla-mux-develamazon-linux-ami-2-upgrade-golang-github-kr-pty-develamazon-linux-ami-2-upgrade-golang-github-syndtr-gocapability-develamazon-linux-ami-2-upgrade-golang-googlecode-net-develamazon-linux-ami-2-upgrade-golang-googlecode-sqlite-develamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfo

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today