In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade podman-pluginsUpgrade git-lfsUpgrade podman-testsUpgrade podman-remoteUpgrade podmanUpgrade podman-docker | Oct 31, 2022 | Jan 2, 2021 |
| Centos_linux | — | Upgrade podman-remote-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade git-lfsUpgrade podman-pluginsUpgrade podman-remoteUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-gvproxy | Oct 26, 2022 | Jan 2, 2021 |
| Debian | — | Upgrade golang-golang-x-text | Jul 30, 2024 | Jan 2, 2021 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade git-lfsUpgrade podman-remoteUpgrade podman-docker | Oct 26, 2022 | Jan 2, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operator | Mar 29, 2022 | Jan 2, 2021 |
| Redhat_linux | — | Upgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade git-lfsUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade podman-dockerNo solution existsUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-gvproxyUpgrade git-lfs-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-catatonit-debuginfo | Oct 26, 2022 | Jan 2, 2021 |
| Rocky_linux | — | Upgrade git-lfsUpgrade git-lfs-debugsourceUpgrade git-lfs-debuginfo | Mar 12, 2024 | Jan 2, 2021 |
| Ubuntu | — | Upgrade golang-golang-x-text-devUpgrade golang-x-text-dev | Mar 22, 2023 | Jan 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub