Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade golang-bin | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade go-toolsetUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade delve-debugsourceUpgrade golang-srcUpgrade delveUpgrade delve-debuginfoUpgrade golang-raceUpgrade golang-bin | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade flannelUpgrade go-toolsetUpgrade istio-node-agentUpgrade kubernetes-cni-pluginsUpgrade kata-shimUpgrade corednsUpgrade grafanaUpgrade kata-ksm-throttlerUpgrade istio-sidecar-injectorUpgrade istioUpgrade istio-proxy-initUpgrade yqUpgrade istio-istioctlUpgrade cri-oUpgrade delveUpgrade golang-docsUpgrade kubeadm-ha-setupUpgrade istio-pilot-discoveryUpgrade olcne-prometheus-chartUpgrade olcnectlUpgrade olcne-utilsUpgrade kata-runtimeUpgrade kubernetes-cniUpgrade kata-proxyUpgrade olcne-agentUpgrade docker-engineUpgrade istio-pilot-agentUpgrade golangUpgrade cri-toolsUpgrade kubectlUpgrade kata-imageUpgrade kataUpgrade istio-galleyUpgrade olcne-istio-chartUpgrade golang-testsUpgrade olcne-api-serverUpgrade golang-miscUpgrade helmUpgrade conmonUpgrade olcne-nginxUpgrade golang-binUpgrade golang-srcUpgrade kubeadmUpgrade istio-mixcUpgrade golang-raceUpgrade kubeletUpgrade istio-citadelUpgrade kata-agentUpgrade istio-mixsUpgrade etcdUpgrade docker-cliUpgrade kubernetes-dashboardUpgrade prometheus | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade openshiftUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade redhat-release-coreosUpgrade openshift-clientsUpgrade cri-toolsUpgrade buildahUpgrade runcUpgrade skopeoUpgrade podmanUpgrade apbUpgrade jenkins-2-pluginsUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade openshift-eventrouterUpgrade faqUpgrade atomic-enterprise-service-catalogUpgrade cri-oUpgrade kubefed-clientUpgrade machine-config-daemon | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | Upgrade golang-docsUpgrade delve-debugsourceUpgrade delveNo solution existsUpgrade golang-testsUpgrade golang-binUpgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade golangUpgrade golang-miscUpgrade golang-src | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.14Upgrade go1.13-raceUpgrade go1.14-raceUpgrade go1.14-docUpgrade go1.13-docUpgrade go1.13 | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub