Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade udicaUpgrade critUpgrade buildahUpgrade crunUpgrade conmonUpgrade golang-srcUpgrade golang-binUpgrade golang-raceUpgrade golang-miscUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade golangUpgrade criuUpgrade podman-pluginsUpgrade podmanUpgrade grafana-pcpUpgrade golang-docsUpgrade python3-podmanUpgrade podman-catatonitUpgrade golang-testsUpgrade toolbox-testsUpgrade netavarkUpgrade runcUpgrade skopeoUpgrade criu-develUpgrade podman-gvproxyUpgrade criu-libsUpgrade grafanaUpgrade podman-testsUpgrade buildah-testsUpgrade podman-dockerUpgrade skopeo-testsUpgrade containers-commonUpgrade cockpit-podmanUpgrade git-lfsUpgrade libslirpUpgrade libslirp-develUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade container-selinuxUpgrade go-toolsetUpgrade python3-criuUpgrade slirp4netns | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-filesystemUpgrade runc-debuginfoUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golang-github-godbus-dbus-develUpgrade golang-binUpgrade golang-github-kr-pty-develUpgrade golistUpgrade golang-googlecode-net-develUpgrade golist-debuginfoUpgrade golang-sharedUpgrade runcUpgrade golang-docsUpgrade golangUpgrade go-rpm-macrosUpgrade go-srpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-templatesUpgrade golang-miscUpgrade golang-github-gorilla-context-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-raceUpgrade golang-tests | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golistUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-sharedUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade golang-binUpgrade golist-debugsourceUpgrade golang | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade criuUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade buildah-debuginfoUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade git-lfs-debuginfoUpgrade go-toolsetUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade critUpgrade podman-debugsourceUpgrade golang-srcUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade udicaUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade golang-testsUpgrade python3-criuUpgrade buildah-testsUpgrade runcUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade podman-catatonitUpgrade grafana-debuginfoUpgrade toolbox-testsUpgrade conmonUpgrade git-lfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-testsUpgrade golang-miscUpgrade podman-dockerUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade golang-raceUpgrade toolboxUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade delveUpgrade libslirpUpgrade criu-libsUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade crunUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade criu-develUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade git-lfsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade netavark | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Oracle_linux | — | Upgrade netavarkUpgrade podman-gvproxyUpgrade golang-raceUpgrade podman-dockerUpgrade python3-podmanUpgrade git-lfsUpgrade grafanaUpgrade cockpit-podmanUpgrade crunUpgrade go-toolsetUpgrade libslirpUpgrade slirp4netnsUpgrade podman-testsUpgrade buildahUpgrade buildah-testsUpgrade conmonUpgrade container-selinuxUpgrade golang-srcUpgrade golang-binUpgrade fuse-overlayfsUpgrade criu-develUpgrade delveUpgrade criuUpgrade podman-catatonitUpgrade golangUpgrade aardvark-dnsUpgrade golang-testsUpgrade podman-pluginsUpgrade grafana-pcpUpgrade runcUpgrade podman-remoteUpgrade podmanUpgrade golang-miscUpgrade critUpgrade containers-commonUpgrade skopeo-testsUpgrade python3-criuUpgrade criu-libsUpgrade skopeoUpgrade libslirp-develUpgrade golang-docsUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade containernetworking-plugins | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade grafana-debuginfoUpgrade golang-docsUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade libslirp-develUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade container-selinuxUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade delve-debugsourceUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade golang-binUpgrade fuse-overlayfsUpgrade runcUpgrade criuUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade grafana-pcpUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildahUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade golang-srcUpgrade critUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoNo solution existsUpgrade containers-commonUpgrade golangUpgrade udicaUpgrade python3-criuUpgrade delve-debuginfoUpgrade criu-libsUpgrade golang-testsUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade delveUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade grafana-pcp-debuginfoUpgrade golang-raceUpgrade libslirpUpgrade podman-testsUpgrade go-toolsetUpgrade criu-develUpgrade netavarkUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade toolboxUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade golang-miscUpgrade git-lfsUpgrade crun-debuginfoUpgrade crunUpgrade buildah-testsUpgrade conmonUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade grafanaUpgrade containernetworking-plugins-debugsourceUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade skopeoUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade podman-catatonitUpgrade crunUpgrade crun-debugsourceUpgrade containers-commonUpgrade buildah-debuginfoUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade grafana-pcp-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golang-binUpgrade criuUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade conmonUpgrade podman-testsUpgrade criu-develUpgrade toolboxUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade podman-remoteUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade grafana-pcpUpgrade git-lfs-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade libslirp-develUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade skopeo-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade critUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade delve | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-docUpgrade go1.17-docUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub