regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golangUpgrade golang-sharedUpgrade golang-raceUpgrade golang-docs | Sep 30, 2022 | Mar 5, 2022 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Mar 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-miscUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-raceUpgrade golang-sharedUpgrade golang-tests | Feb 17, 2025 | Mar 3, 2022 |
| Centos_linux | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade go-toolsetUpgrade golang-srcUpgrade delve-debuginfoUpgrade delveUpgrade delve-debugsourceUpgrade golang-raceUpgrade golang-docs | Nov 9, 2022 | Mar 5, 2022 |
| Debian | — | Upgrade golang-1.15 | Apr 29, 2022 | Mar 5, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Mar 19, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 7, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 16, 2022 | Mar 5, 2022 |
| Oracle_linux | — | Upgrade olcne-nginxUpgrade olcnectlUpgrade istioUpgrade golang-miscUpgrade olcne-oci-csi-chartUpgrade go-toolsetUpgrade golang-srcUpgrade olcne-agentUpgrade golang-raceUpgrade delveUpgrade golangUpgrade olcne-utilsUpgrade olcne-istio-chartUpgrade olcne-gluster-chartUpgrade golang-testsUpgrade golang-docsUpgrade olcne-olm-chartUpgrade olcne-prometheus-chartUpgrade golang-binUpgrade olcne-api-serverUpgrade istio-istioctlUpgrade olcne-grafana-chart | May 10, 2022 | Mar 3, 2022 |
| Redhat Openshift | — | Upgrade cri-oUpgrade openshift-clientsUpgrade butaneUpgrade ignitionUpgrade cri-tools | Aug 2, 2022 | Mar 3, 2022 |
| Redhat_linux | — | Upgrade golang-binUpgrade go-toolsetUpgrade delveUpgrade golang-docsNo solution existsUpgrade golang-testsUpgrade golang-raceUpgrade golangUpgrade delve-debugsourceUpgrade golang-miscUpgrade delve-debuginfoUpgrade golang-src | Nov 9, 2022 | Mar 5, 2022 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-raceUpgrade golangUpgrade delve-debuginfoUpgrade golang-binUpgrade delveUpgrade go-toolset | Mar 12, 2024 | Mar 5, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Mar 5, 2022 |
| Suse | — | Upgrade go1.16Upgrade go1.16-raceUpgrade go1.17-raceUpgrade go1.16-docUpgrade go1.17-docUpgrade go1.17 | Oct 26, 2022 | Mar 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub