regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-tests | Sep 30, 2022 | Mar 5, 2022 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Mar 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-raceUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-docsUpgrade golang-misc | Feb 17, 2025 | Mar 3, 2022 |
| Centos_linux | — | Upgrade golang-docsUpgrade delve-debugsourceUpgrade delveUpgrade golang-raceUpgrade golang-srcUpgrade golang-testsUpgrade golang-binUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-misc | Nov 9, 2022 | Mar 5, 2022 |
| Debian | — | Upgrade golang-1.15 | Apr 29, 2022 | Mar 5, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Mar 19, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 7, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Apr 26, 2022 | Mar 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 16, 2022 | Mar 5, 2022 |
| Oracle_linux | — | Upgrade olcne-utilsUpgrade golang-docsUpgrade olcne-olm-chartUpgrade olcne-prometheus-chartUpgrade golang-binUpgrade golang-testsUpgrade olcne-istio-chartUpgrade olcne-api-serverUpgrade istio-istioctlUpgrade olcne-gluster-chartUpgrade olcne-grafana-chartUpgrade olcne-nginxUpgrade golang-miscUpgrade olcne-agentUpgrade delveUpgrade olcne-oci-csi-chartUpgrade olcnectlUpgrade istioUpgrade golang-raceUpgrade golangUpgrade go-toolsetUpgrade golang-src | May 10, 2022 | Mar 3, 2022 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade butaneUpgrade cri-oUpgrade ignitionUpgrade cri-tools | Aug 2, 2022 | Mar 3, 2022 |
| Redhat_linux | — | Upgrade golang-binUpgrade delveUpgrade golang-docsUpgrade go-toolsetUpgrade golangUpgrade golang-raceNo solution existsUpgrade delve-debugsourceUpgrade golang-miscUpgrade delve-debuginfoUpgrade golang-srcUpgrade golang-tests | Nov 9, 2022 | Mar 5, 2022 |
| Rocky_linux | — | Upgrade golang-binUpgrade golangUpgrade delve-debugsourceUpgrade golang-raceUpgrade delve-debuginfoUpgrade delveUpgrade go-toolset | Mar 12, 2024 | Mar 5, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Mar 5, 2022 |
| Suse | — | Upgrade go1.17Upgrade go1.16Upgrade go1.17-raceUpgrade go1.17-docUpgrade go1.16-raceUpgrade go1.16-doc | Oct 26, 2022 | Mar 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub