Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade golang-docsUpgrade go-toolsetUpgrade runcUpgrade crunUpgrade python3-criuUpgrade container-selinuxUpgrade delveUpgrade critUpgrade cockpit-podmanUpgrade grafanaUpgrade aardvark-dnsUpgrade udicaUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade golang-binUpgrade podman-remoteUpgrade buildah-testsUpgrade criu-develUpgrade golang-testsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade golangUpgrade podmanUpgrade podman-dockerUpgrade conmonUpgrade golang-srcUpgrade libslirpUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade criu-libsUpgrade golang-miscUpgrade podman-pluginsUpgrade buildahUpgrade containers-commonUpgrade criuUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade podman-testsUpgrade slirp4netnsUpgrade netavarkUpgrade python3-podmanUpgrade skopeo | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golangUpgrade go-filesystemUpgrade runc-debuginfoUpgrade golistUpgrade golang-miscUpgrade golang-github-godbus-dbus-develUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-net-develUpgrade golang-testsUpgrade golang-github-gorilla-context-develUpgrade golang-raceUpgrade golang-github-gorilla-mux-develUpgrade golist-debuginfoUpgrade go-rpm-templatesUpgrade go-rpm-macrosUpgrade golang-binUpgrade runcUpgrade golang-docsUpgrade go-srpm-macros | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-raceUpgrade golang-testsUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade golang-raceUpgrade python3-podmanUpgrade skopeo-debuginfoUpgrade toolbox-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade criu-develUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade libslirpUpgrade libslirp-debugsourceUpgrade criuUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade udicaUpgrade podman-catatonitUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade netavarkUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade golangUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade go-toolsetUpgrade critUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade golang-miscUpgrade container-selinuxUpgrade criu-libsUpgrade libslirp-develUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade buildah-testsUpgrade runcUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade golang-testsUpgrade golang-binUpgrade delve-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade conmonUpgrade crunUpgrade delveUpgrade podman-testsUpgrade golang-raceUpgrade python3-criuUpgrade criu-develUpgrade podman-pluginsUpgrade skopeo-testsUpgrade runcUpgrade golang-binUpgrade libslirp-develUpgrade podman-dockerUpgrade slirp4netnsUpgrade udicaUpgrade critUpgrade golang-docsUpgrade grafanaUpgrade podmanUpgrade libslirpUpgrade podman-gvproxyUpgrade container-selinuxUpgrade golang-srcUpgrade podman-catatonitUpgrade buildah-testsUpgrade python3-podmanUpgrade golangUpgrade cockpit-podmanUpgrade golang-miscUpgrade aardvark-dnsUpgrade containers-commonUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade criuUpgrade podman-remoteUpgrade buildahUpgrade netavarkUpgrade golang-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade libslirpUpgrade criu-develUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade slirp4netnsUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade python3-criuUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade container-selinuxUpgrade buildahUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-srcUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade podman-dockerUpgrade podman-testsUpgrade criu-libsUpgrade libslirp-develUpgrade conmonUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade toolbox-testsUpgrade toolboxUpgrade runcUpgrade crun-debugsourceUpgrade grafana-debuginfoUpgrade critUpgrade golang-raceUpgrade skopeoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade golang-miscUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsNo solution existsUpgrade delve-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade podmanUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade containers-commonUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade golang-docsUpgrade golang-testsUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade crunUpgrade podman-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade toolboxUpgrade podman-catatonitUpgrade toolbox-testsUpgrade delve-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debuginfoUpgrade criuUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debuginfoUpgrade crunUpgrade libslirp-debugsourceUpgrade skopeoUpgrade podman-debuginfoUpgrade critUpgrade golang-binUpgrade fuse-overlayfsUpgrade runcUpgrade podmanUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade grafana-debuginfoUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade golang-raceUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade golangUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade delveUpgrade runc-debugsourceUpgrade grafanaUpgrade podman-debugsourceUpgrade go-toolsetUpgrade crun-debugsourceUpgrade containers-commonUpgrade buildah-debugsourceUpgrade criu-devel | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.17-docUpgrade go1.18-openssl | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-srcUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.16-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub