Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade conmonUpgrade python3-podmanUpgrade golang-srcUpgrade podman-catatonitUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podmanUpgrade criuUpgrade criu-libsUpgrade golangUpgrade podman-testsUpgrade golang-testsUpgrade libslirpUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade toolboxUpgrade buildahUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade golang-raceUpgrade netavarkUpgrade golang-miscUpgrade skopeoUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade runcUpgrade cockpit-podmanUpgrade go-toolsetUpgrade python3-criuUpgrade criu-develUpgrade critUpgrade golang-binUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-dockerUpgrade delveUpgrade golang-docsUpgrade udicaUpgrade grafanaUpgrade crunUpgrade skopeo-testsUpgrade libslirp-devel | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-macrosUpgrade golang-googlecode-net-develUpgrade golang-github-godbus-dbus-develUpgrade golang-docsUpgrade runc-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade golang-sharedUpgrade go-rpm-templatesUpgrade go-filesystemUpgrade golist-debuginfoUpgrade go-srpm-macrosUpgrade golang-srcUpgrade golang-binUpgrade golistUpgrade golang-raceUpgrade golang-miscUpgrade golang-testsUpgrade golang-googlecode-sqlite-develUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golistUpgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-docsUpgrade golang-raceUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golist-debugsource | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade crunUpgrade crun-debugsourceUpgrade buildahUpgrade libslirp-debugsourceUpgrade grafana-debuginfoUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade runcUpgrade toolboxUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-dockerUpgrade golang-testsUpgrade critUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade podmanUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade delveUpgrade skopeo-testsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade go-toolsetUpgrade grafanaUpgrade crun-debuginfoUpgrade criu-libsUpgrade podman-testsUpgrade slirp4netnsUpgrade netavarkUpgrade golangUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade containers-commonUpgrade libslirp-develUpgrade python3-podmanUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade grafanaUpgrade conmonUpgrade go-toolsetUpgrade python3-podmanUpgrade container-selinuxUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-testsUpgrade golang-raceUpgrade buildahUpgrade buildah-testsUpgrade podman-dockerUpgrade udicaUpgrade libslirpUpgrade crunUpgrade criuUpgrade criu-develUpgrade runcUpgrade podman-remoteUpgrade podman-pluginsUpgrade golangUpgrade libslirp-develUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade critUpgrade golang-miscUpgrade podman-catatonitUpgrade netavarkUpgrade skopeoUpgrade golang-binUpgrade delveUpgrade golang-testsUpgrade golang-docsUpgrade skopeo-testsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-common | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade critUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade runc-debuginfoUpgrade golang-srcUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade python3-criuUpgrade grafanaUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade criu-debugsourceUpgrade golang-docsUpgrade libslirpUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade criu-libsUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade buildahUpgrade buildah-testsUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade podman-remoteUpgrade golangUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade criu-debuginfoUpgrade netavarkUpgrade golang-testsUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookNo solution existsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade crunUpgrade python3-podmanUpgrade skopeoUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade criuUpgrade delveUpgrade buildah-debugsourceUpgrade golang-miscUpgrade containers-commonUpgrade delve-debugsourceUpgrade skopeo-testsUpgrade podman-plugins | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criu-develUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-develUpgrade podman-debugsourceUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade runcUpgrade podman-pluginsUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade delveUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade containers-commonUpgrade criu-libsUpgrade skopeoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade podman-catatonitUpgrade podman-remote-debuginfoUpgrade critUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade go-toolsetUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade libslirpUpgrade fuse-overlayfsUpgrade crunUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade grafana-debuginfoUpgrade grafanaUpgrade slirp4netnsUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade conmon-debugsourceUpgrade conmon | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.18Upgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18-openssl-raceUpgrade go1.18-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub