Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade golangUpgrade golang-miscUpgrade go-toolsetUpgrade golang-docsUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-raceUpgrade delve-debuginfoUpgrade golang-srcUpgrade delveUpgrade golang-bin | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade kata-shimUpgrade golang-docsUpgrade kubernetes-cni-pluginsUpgrade istioUpgrade kubeadm-ha-setupUpgrade corednsUpgrade cri-oUpgrade olcnectlUpgrade istio-pilot-discoveryUpgrade olcne-prometheus-chartUpgrade olcne-utilsUpgrade kata-runtimeUpgrade delveUpgrade istio-proxy-initUpgrade yqUpgrade istio-istioctlUpgrade flannelUpgrade go-toolsetUpgrade grafanaUpgrade istio-node-agentUpgrade kata-ksm-throttlerUpgrade istio-sidecar-injectorUpgrade olcne-istio-chartUpgrade kubernetes-dashboardUpgrade golang-raceUpgrade kubectlUpgrade kata-imageUpgrade kataUpgrade istio-galleyUpgrade prometheusUpgrade istio-mixcUpgrade istio-pilot-agentUpgrade docker-engineUpgrade cri-toolsUpgrade etcdUpgrade kubeadmUpgrade olcne-agentUpgrade istio-mixsUpgrade docker-cliUpgrade kata-agentUpgrade kubeletUpgrade helmUpgrade istio-citadelUpgrade golang-srcUpgrade olcne-nginxUpgrade golang-miscUpgrade golang-testsUpgrade kata-proxyUpgrade conmonUpgrade golang-binUpgrade olcne-api-serverUpgrade golangUpgrade kubernetes-cni | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-toolsUpgrade machine-config-daemonUpgrade cri-oUpgrade openshiftUpgrade redhat-release-coreosUpgrade ignitionUpgrade kubefed-clientUpgrade atomic-enterprise-service-catalogUpgrade faqUpgrade golang-github-prometheus-promuUpgrade skopeoUpgrade buildahUpgrade runcUpgrade jenkins-2-pluginsUpgrade atomic-openshift-service-idlerUpgrade openshift-eventrouterUpgrade apbUpgrade containernetworking-pluginsUpgrade podman | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade delveUpgrade golang-testsNo solution existsUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade go-toolsetUpgrade golang-raceUpgrade delve-debuginfo | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.13Upgrade go1.13-docUpgrade go1.14-docUpgrade go1.13-raceUpgrade go1.14Upgrade go1.14-race | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-src | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub