Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade fuse-overlayfsUpgrade criu-libsUpgrade criuUpgrade conmonUpgrade podmanUpgrade buildah-testsUpgrade netavarkUpgrade containers-commonUpgrade golang-testsUpgrade golang-srcUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade podman-gvproxyUpgrade skopeoUpgrade libslirpUpgrade podman-catatonitUpgrade toolbox-testsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-testsUpgrade toolboxUpgrade golang-raceUpgrade buildahUpgrade libslirp-develUpgrade delveUpgrade grafanaUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade udicaUpgrade critUpgrade crunUpgrade container-selinuxUpgrade python3-criuUpgrade podman-pluginsUpgrade criu-develUpgrade golang-binUpgrade podman-dockerUpgrade go-toolsetUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade runc | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-macrosUpgrade go-filesystemUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-docsUpgrade runcUpgrade golang-googlecode-net-develUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade golistUpgrade golang-testsUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golang-github-kr-pty-develUpgrade golang-srcUpgrade golang-raceUpgrade golang-binUpgrade golang-miscUpgrade golang-googlecode-sqlite-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-sharedUpgrade golistUpgrade golang-testsUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-misc | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-catatonit-debuginfoUpgrade critUpgrade golang-testsUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade runcUpgrade golang-binUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade criuUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade toolboxUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade buildahUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade podmanUpgrade skopeoUpgrade buildah-debugsourceUpgrade udicaUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade grafana-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade podman-testsUpgrade netavarkUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade golang-miscUpgrade containers-commonUpgrade runc-debuginfoUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade buildah-testsUpgrade conmonUpgrade slirp4netnsUpgrade golangUpgrade grafanaUpgrade golang-raceUpgrade criu-libsUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade delveUpgrade criu-devel | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criuUpgrade crunUpgrade libslirpUpgrade podman-dockerUpgrade python3-podmanUpgrade udicaUpgrade buildahUpgrade container-selinuxUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade conmonUpgrade podman-testsUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade python3-criuUpgrade golang-raceUpgrade grafanaUpgrade podman-gvproxyUpgrade libslirp-develUpgrade podmanUpgrade golang-miscUpgrade golangUpgrade skopeoUpgrade runcUpgrade netavarkUpgrade delveUpgrade golang-testsUpgrade skopeo-testsUpgrade critUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade podman-catatonitUpgrade criu-libsUpgrade criu-develUpgrade golang-binUpgrade golang-docsUpgrade podman-remoteUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade containers-common | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade skopeoUpgrade podman-catatonitUpgrade python3-podmanUpgrade conmonUpgrade golang-testsUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade criuUpgrade golang-binUpgrade udicaUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade toolboxNo solution existsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade podmanUpgrade golang-miscUpgrade delveUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade criu-libsUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade podman-remoteUpgrade python3-criuUpgrade buildahUpgrade runcUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade golang-srcUpgrade podman-dockerUpgrade criu-debugsourceUpgrade delve-debuginfoUpgrade golangUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade grafanaUpgrade podman-testsUpgrade toolbox-testsUpgrade buildah-testsUpgrade critUpgrade crun-debuginfoUpgrade container-selinuxUpgrade fuse-overlayfs-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade grafana-debuginfoUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade golang-raceUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade go-toolsetUpgrade grafanaUpgrade crunUpgrade libslirpUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade buildahUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade libslirp-develUpgrade podmanUpgrade python3-criuUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade criu-develUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade critUpgrade golang-binUpgrade toolbox-debugsourceUpgrade toolboxUpgrade runc-debuginfoUpgrade golangUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade containers-commonUpgrade buildah-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18Upgrade go1.17-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub