Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade golang-testsUpgrade golang-raceUpgrade go-toolsetUpgrade golang-miscUpgrade golang-srcUpgrade golang-docsUpgrade golang-binUpgrade golang | May 13, 2022 | Oct 18, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang | Jul 4, 2022 | Oct 18, 2021 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Oct 18, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | Feb 17, 2025 | Oct 7, 2021 |
| Centos_linux | — | Upgrade delveUpgrade golang-docsUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade delve-debugsourceUpgrade golang-srcUpgrade golang-miscUpgrade golang-tests | May 13, 2022 | Oct 18, 2021 |
| Debian | — | Upgrade golang-1.15 | Apr 21, 2023 | Oct 18, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Oct 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 28, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Feb 24, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 28, 2021 | Oct 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 28, 2022 | Oct 18, 2021 |
| Oracle_linux | — | Upgrade golang-testsUpgrade delveUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-docsUpgrade go-toolsetUpgrade golang-race | May 18, 2022 | Oct 7, 2021 |
| Redhat_linux | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade golang-docsNo solution existsUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-testsUpgrade delve | May 13, 2022 | Oct 18, 2021 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade go-toolsetUpgrade delveUpgrade delve-debuginfo | Mar 5, 2024 | Oct 18, 2021 |
| Suse | — | Upgrade go1.17-docUpgrade go1.17-raceUpgrade go1.16-docUpgrade go1.17Upgrade go1.16-raceUpgrade go1.16 | Oct 21, 2021 | Oct 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub