vulnerability

Amazon Linux 2023: CVE-2022-1962: Important priority package update for golist (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
2022-07-12
Added
2025-02-17
Modified
2025-02-17

Description

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability.

Solution(s)

amazon-linux-2023-upgrade-compat-golang-github-cpuguy83-md2man-2-develamazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-github-cpuguy83-md2manamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debuginfoamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debugsourceamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-develamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-raceamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-testsamazon-linux-2023-upgrade-golistamazon-linux-2023-upgrade-golist-debuginfoamazon-linux-2023-upgrade-golist-debugsource
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.