In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-dockerUpgrade podmanUpgrade podman-remote | Oct 31, 2022 | Jan 2, 2021 |
| Centos_linux | — | Upgrade podman-dockerUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade git-lfsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade podman-remoteUpgrade podman-pluginsUpgrade git-lfs-debuginfo | Oct 26, 2022 | Jan 2, 2021 |
| Debian | — | Upgrade golang-golang-x-text | Jul 30, 2024 | Jan 2, 2021 |
| Oracle_linux | — | Upgrade podmanUpgrade podman-pluginsUpgrade podman-catatonitUpgrade podman-testsUpgrade podman-dockerUpgrade git-lfsUpgrade podman-gvproxyUpgrade podman-remote | Oct 26, 2022 | Jan 2, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operator | Mar 29, 2022 | Jan 2, 2021 |
| Redhat_linux | — | No solution existsUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade podman-gvproxyUpgrade git-lfs-debugsource | Oct 26, 2022 | Jan 2, 2021 |
| Rocky_linux | — | Upgrade git-lfs-debuginfoUpgrade git-lfsUpgrade git-lfs-debugsource | Mar 12, 2024 | Jan 2, 2021 |
| Ubuntu | — | Upgrade golang-golang-x-text-devUpgrade golang-x-text-dev | Mar 22, 2023 | Jan 2, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub