regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-docsUpgrade golang-sharedUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-src | Sep 30, 2022 | Mar 5, 2022 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Mar 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-docs | Feb 17, 2025 | Mar 3, 2022 |
| Centos_linux | — | Upgrade golangUpgrade golang-testsUpgrade delve-debuginfoUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade go-toolsetUpgrade delveUpgrade golang-docsUpgrade golang-raceUpgrade delve-debugsource | Nov 9, 2022 | Mar 5, 2022 |
| Debian | — | Upgrade golang-1.15 | Apr 29, 2022 | Mar 5, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Mar 19, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jun 7, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 16, 2022 | Mar 5, 2022 |
| Oracle_linux | — | Upgrade golang-docsUpgrade golang-testsUpgrade olcne-prometheus-chartUpgrade olcne-utilsUpgrade olcne-istio-chartUpgrade olcne-grafana-chartUpgrade olcne-gluster-chartUpgrade golang-binUpgrade olcne-olm-chartUpgrade olcne-api-serverUpgrade istio-istioctlUpgrade golangUpgrade istioUpgrade go-toolsetUpgrade golang-miscUpgrade golang-raceUpgrade delveUpgrade olcne-oci-csi-chartUpgrade olcne-agentUpgrade golang-srcUpgrade olcne-nginxUpgrade olcnectl | May 10, 2022 | Mar 3, 2022 |
| Redhat Openshift | — | Upgrade butaneUpgrade openshift-clientsUpgrade cri-oUpgrade ignitionUpgrade cri-tools | Aug 2, 2022 | Mar 3, 2022 |
| Redhat_linux | — | Upgrade golang-srcUpgrade delve-debugsourceUpgrade golang-testsUpgrade golang-miscUpgrade golang-raceUpgrade delve-debuginfoNo solution existsUpgrade golangUpgrade golang-docsUpgrade delveUpgrade go-toolsetUpgrade golang-bin | Nov 9, 2022 | Mar 5, 2022 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade delveUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-raceUpgrade golangUpgrade delve-debuginfo | Mar 12, 2024 | Mar 5, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Mar 5, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.16-docUpgrade go1.16Upgrade go1.17-raceUpgrade go1.16-raceUpgrade go1.17 | Oct 26, 2022 | Mar 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub