Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade udicaUpgrade golang-docsUpgrade runcUpgrade libslirp-develUpgrade crunUpgrade grafanaUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade critUpgrade criu-develUpgrade go-toolsetUpgrade golang-binUpgrade container-selinuxUpgrade delveUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade conmonUpgrade skopeoUpgrade criuUpgrade criu-libsUpgrade golangUpgrade containers-commonUpgrade golang-testsUpgrade libslirpUpgrade podman-testsUpgrade golang-srcUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade golang-raceUpgrade toolboxUpgrade golang-miscUpgrade podmanUpgrade buildahUpgrade podman-catatonitUpgrade toolbox-testsUpgrade python3-podman | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golist-debuginfoUpgrade go-srpm-macrosUpgrade golang-docsUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-macrosUpgrade go-filesystemUpgrade runcUpgrade golang-sharedUpgrade go-rpm-templatesUpgrade golang-github-godbus-dbus-develUpgrade golang-github-syndtr-gocapability-develUpgrade runc-debuginfoUpgrade golang-googlecode-net-develUpgrade golang-github-kr-pty-develUpgrade golistUpgrade golang-github-gorilla-context-develUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-googlecode-sqlite-develUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-testsUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade golang-docsUpgrade golistUpgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade slirp4netnsUpgrade delve-debuginfoUpgrade golangUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade golang-raceUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade cockpit-podmanUpgrade podman-testsUpgrade criu-libsUpgrade crun-debuginfoUpgrade netavarkUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade containers-commonUpgrade grafanaUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade golang-srcUpgrade criu-develUpgrade delveUpgrade conmon-debugsourceUpgrade golang-docsUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podman-remoteUpgrade toolbox-testsUpgrade toolboxUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade grafana-debuginfoUpgrade runcUpgrade golang-testsUpgrade podman-catatonitUpgrade golang-binUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade critUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade criu-debugsourceUpgrade podmanUpgrade udicaUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade criu | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade udicaUpgrade libslirpUpgrade fuse-overlayfsUpgrade conmonUpgrade criuUpgrade crunUpgrade container-selinuxUpgrade go-toolsetUpgrade python3-podmanUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade buildahUpgrade podman-gvproxyUpgrade podman-testsUpgrade grafanaUpgrade golang-raceUpgrade python3-criuUpgrade criu-libsUpgrade golang-miscUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade golangUpgrade criu-develUpgrade critUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-catatonitUpgrade golang-srcUpgrade skopeo-testsUpgrade netavarkUpgrade golang-docsUpgrade golang-testsUpgrade skopeoUpgrade runcUpgrade golang-binUpgrade delveUpgrade containers-commonUpgrade podman-remote | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade crunUpgrade criuUpgrade criu-develUpgrade golang-testsUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-debuginfoUpgrade toolbox-debugsourceUpgrade delveUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade netavarkUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade toolboxUpgrade golang-raceUpgrade criu-libs-debuginfoNo solution existsUpgrade containers-commonUpgrade skopeo-testsUpgrade conmonUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade skopeoUpgrade libslirp-develUpgrade golang-binUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade podman-remoteUpgrade critUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade podman-testsUpgrade container-selinuxUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade podman-dockerUpgrade criu-debugsourceUpgrade buildah-testsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade runcUpgrade grafanaUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade libslirpUpgrade criu-libsUpgrade buildah-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade golangUpgrade buildahUpgrade runc-debuginfoUpgrade go-toolset | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade buildahUpgrade grafanaUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade toolbox-testsUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade conmonUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade criuUpgrade python3-criuUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade delve-debugsourceUpgrade toolboxUpgrade runc-debuginfoUpgrade golangUpgrade podman-debugsourceUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade criu-develUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade libslirp-devel | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.17-docUpgrade go1.17-raceUpgrade go1.18-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.18Upgrade golang-1.18-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub