Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade golang-misc | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-srcUpgrade delveUpgrade golang-raceUpgrade golang-testsUpgrade go-toolsetUpgrade golang-docsUpgrade golangUpgrade golang-misc | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade istio-pilot-discoveryUpgrade kata-runtimeUpgrade olcne-prometheus-chartUpgrade golang-docsUpgrade istio-node-agentUpgrade kata-shimUpgrade flannelUpgrade go-toolsetUpgrade kubeadm-ha-setupUpgrade olcne-utilsUpgrade olcnectlUpgrade delveUpgrade yqUpgrade corednsUpgrade istio-sidecar-injectorUpgrade istio-proxy-initUpgrade istio-istioctlUpgrade kata-ksm-throttlerUpgrade grafanaUpgrade istioUpgrade cri-oUpgrade kubernetes-cni-pluginsUpgrade istio-mixcUpgrade olcne-api-serverUpgrade olcne-agentUpgrade kata-agentUpgrade istio-mixsUpgrade kata-imageUpgrade golangUpgrade istio-pilot-agentUpgrade kubeletUpgrade istio-citadelUpgrade golang-raceUpgrade prometheusUpgrade etcdUpgrade docker-cliUpgrade kubernetes-dashboardUpgrade kataUpgrade istio-galleyUpgrade olcne-istio-chartUpgrade kubectlUpgrade docker-engineUpgrade cri-toolsUpgrade kata-proxyUpgrade golang-miscUpgrade kubeadmUpgrade golang-binUpgrade conmonUpgrade olcne-nginxUpgrade golang-srcUpgrade golang-testsUpgrade helmUpgrade kubernetes-cni | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade redhat-release-coreosUpgrade openshiftUpgrade machine-config-daemonUpgrade faqUpgrade kubefed-clientUpgrade cri-toolsUpgrade cri-oUpgrade atomic-enterprise-service-catalogUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade openshift-clientsUpgrade buildahUpgrade runcUpgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade jenkins-2-pluginsUpgrade apbUpgrade openshift-eventrouter | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | Upgrade delveUpgrade delve-debugsourceUpgrade golang-testsNo solution existsUpgrade golang-raceUpgrade go-toolsetUpgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade delve-debuginfoUpgrade golang-docs | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.13Upgrade go1.13-docUpgrade go1.13-raceUpgrade go1.14-raceUpgrade go1.14-docUpgrade go1.14 | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro) | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub