Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golangUpgrade golang-binUpgrade go-toolsetUpgrade golang-srcUpgrade golang-miscUpgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade golang-tests | May 13, 2022 | Nov 8, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Nov 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golang-raceUpgrade golang-shared | Jul 4, 2022 | Nov 8, 2021 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Nov 8, 2021 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golang-shared | Feb 17, 2025 | Aug 30, 2021 |
| Centos_linux | — | Upgrade golang-docsUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade go-toolsetUpgrade delve-debuginfoUpgrade delve | May 13, 2022 | Nov 8, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Nov 5, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Nov 8, 2021 |
| Oracle_linux | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade golang-raceUpgrade golang-docsUpgrade go-toolsetUpgrade delveUpgrade golang-bin | May 18, 2022 | Aug 30, 2021 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshift | Dec 22, 2022 | Aug 30, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade delveUpgrade golang-srcUpgrade go-toolsetUpgrade golang-raceUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-miscUpgrade golang | May 13, 2022 | Nov 8, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade delve-debugsourceUpgrade golang-raceUpgrade golangUpgrade go-toolsetUpgrade golang-binUpgrade delve-debuginfo | Mar 5, 2024 | Nov 8, 2021 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6 | Jul 30, 2026 | Nov 8, 2021 |
| Suse | — | Upgrade go1.17Upgrade go1.17-raceUpgrade go1.16-raceUpgrade go1.16Upgrade go1.16-docUpgrade go1.17-doc | Dec 2, 2021 | Nov 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub