In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-testsUpgrade git-lfsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade podman-remoteUpgrade podman-docker | Oct 31, 2022 | Jan 2, 2021 |
| Centos_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-testsUpgrade podmanUpgrade podman-remoteUpgrade podman-debuginfoUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfo | Oct 26, 2022 | Jan 2, 2021 |
| Debian | — | Upgrade golang-golang-x-text | Jul 30, 2024 | Jan 2, 2021 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade podman-pluginsUpgrade podmanUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade podman-testsUpgrade git-lfsUpgrade podman-docker | Oct 26, 2022 | Jan 2, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operator | Mar 29, 2022 | Jan 2, 2021 |
| Redhat_linux | — | Upgrade podman-dockerUpgrade git-lfs-debugsourceUpgrade podmanUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoNo solution existsUpgrade git-lfsUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-debugsource | Oct 26, 2022 | Jan 2, 2021 |
| Rocky_linux | — | Upgrade git-lfs-debuginfoUpgrade git-lfsUpgrade git-lfs-debugsource | Mar 12, 2024 | Jan 2, 2021 |
| Ubuntu | — | Upgrade golang-x-text-devUpgrade golang-golang-x-text-dev | Mar 22, 2023 | Jan 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub