Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 13, 2020 | Aug 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade golang | Oct 2, 2020 | Aug 6, 2020 |
| Amazon_linux | — | Upgrade golang | Oct 28, 2020 | Aug 6, 2020 |
| Centos_linux | — | Upgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade golang-srcUpgrade delveUpgrade go-toolsetUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade golang-misc | Sep 9, 2020 | Aug 6, 2020 |
| Debian | — | Upgrade golang-1.15 | Nov 23, 2020 | Aug 6, 2020 |
| Freebsd | — | Upgrade go | Aug 7, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 2, 2020 | Aug 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Aug 31, 2020 | Aug 6, 2020 |
| Oracle_linux | — | Upgrade istio-istioctlUpgrade kata-shimUpgrade yqUpgrade olcne-utilsUpgrade olcnectlUpgrade cri-oUpgrade istio-node-agentUpgrade grafanaUpgrade flannelUpgrade corednsUpgrade kata-ksm-throttlerUpgrade go-toolsetUpgrade istio-sidecar-injectorUpgrade istioUpgrade kubernetes-cni-pluginsUpgrade istio-proxy-initUpgrade kubeadm-ha-setupUpgrade olcne-prometheus-chartUpgrade istio-pilot-discoveryUpgrade kata-runtimeUpgrade delveUpgrade golang-docsUpgrade kubernetes-dashboardUpgrade docker-cliUpgrade helmUpgrade docker-engineUpgrade cri-toolsUpgrade kata-imageUpgrade kubeadmUpgrade kata-proxyUpgrade golang-testsUpgrade istio-citadelUpgrade prometheusUpgrade istio-mixcUpgrade kata-agentUpgrade istio-mixsUpgrade olcne-agentUpgrade etcdUpgrade kataUpgrade olcne-api-serverUpgrade olcne-istio-chartUpgrade kubernetes-cniUpgrade kubectlUpgrade golang-srcUpgrade golang-binUpgrade istio-galleyUpgrade olcne-nginxUpgrade kubeletUpgrade conmonUpgrade golang-raceUpgrade golang-miscUpgrade istio-pilot-agentUpgrade golang | Aug 25, 2020 | Aug 6, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-service-idlerUpgrade openshift-eventrouterUpgrade buildahUpgrade apbUpgrade containernetworking-pluginsUpgrade jenkins-2-pluginsUpgrade podmanUpgrade runcUpgrade skopeoUpgrade kubefed-clientUpgrade atomic-enterprise-service-catalogUpgrade golang-github-prometheus-promuUpgrade openshiftUpgrade cri-toolsUpgrade faqUpgrade machine-config-daemonUpgrade cri-oUpgrade redhat-release-coreosUpgrade openshift-clientsUpgrade ignition | Dec 29, 2020 | Aug 6, 2020 |
| Redhat_linux | — | Upgrade delve-debugsourceUpgrade delveUpgrade golang-docsUpgrade golang-testsUpgrade golang-binNo solution existsUpgrade golang-miscUpgrade golang-raceUpgrade golang-srcUpgrade golangUpgrade delve-debuginfoUpgrade go-toolset | Sep 9, 2020 | Aug 6, 2020 |
| Suse | — | Upgrade go1.14Upgrade go1.13-raceUpgrade go1.14-raceUpgrade go1.14-docUpgrade go1.13-docUpgrade go1.13 | Aug 11, 2020 | Aug 6, 2020 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro) | Nov 15, 2022 | Aug 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub