Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-testsUpgrade go-toolsetUpgrade golang-raceUpgrade delve-debuginfoUpgrade golang-srcUpgrade delveUpgrade golang-binUpgrade delve-debugsource | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade kubernetes-dashboardUpgrade istio-mixcUpgrade kataUpgrade prometheusUpgrade kata-imageUpgrade kubectlUpgrade olcne-istio-chartUpgrade kubernetes-cniUpgrade istio-galleyUpgrade olcne-api-serverUpgrade golang-miscUpgrade golang-testsUpgrade istio-citadelUpgrade golang-raceUpgrade kata-proxyUpgrade golangUpgrade kubeletUpgrade helmUpgrade golang-binUpgrade golang-srcUpgrade conmonUpgrade etcdUpgrade olcne-agentUpgrade olcne-nginxUpgrade kata-agentUpgrade docker-engineUpgrade istio-pilot-agentUpgrade docker-cliUpgrade istio-mixsUpgrade kubeadmUpgrade cri-toolsUpgrade istio-pilot-discoveryUpgrade golang-docsUpgrade istio-istioctlUpgrade istio-sidecar-injectorUpgrade grafanaUpgrade corednsUpgrade cri-oUpgrade istio-node-agentUpgrade go-toolsetUpgrade flannelUpgrade kata-shimUpgrade olcnectlUpgrade kubernetes-cni-pluginsUpgrade delveUpgrade yqUpgrade istio-proxy-initUpgrade olcne-utilsUpgrade istioUpgrade kata-ksm-throttlerUpgrade kata-runtimeUpgrade olcne-prometheus-chartUpgrade kubeadm-ha-setup | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-service-idlerUpgrade runcUpgrade containernetworking-pluginsUpgrade openshift-eventrouterUpgrade podmanUpgrade skopeoUpgrade jenkins-2-pluginsUpgrade buildahUpgrade apbUpgrade redhat-release-coreosUpgrade golang-github-prometheus-promuUpgrade cri-toolsUpgrade faqUpgrade kubefed-clientUpgrade openshiftUpgrade machine-config-daemonUpgrade openshift-clientsUpgrade ignitionUpgrade atomic-enterprise-service-catalogUpgrade cri-o | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | Upgrade delve-debugsourceNo solution existsUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade delveUpgrade golangUpgrade golang-miscUpgrade delve-debuginfoUpgrade golang-srcUpgrade go-toolsetUpgrade golang-race | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.13Upgrade go1.13-docUpgrade go1.13-raceUpgrade go1.14Upgrade go1.14-docUpgrade go1.14-race | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub