Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade buildah-testsUpgrade cockpit-podmanUpgrade golang-miscUpgrade python3-podmanUpgrade podman-catatonitUpgrade toolboxUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-dockerUpgrade aardvark-dnsUpgrade criuUpgrade golang-binUpgrade toolbox-testsUpgrade golang-srcUpgrade skopeoUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-testsUpgrade runcUpgrade udicaUpgrade buildahUpgrade fuse-overlayfsUpgrade conmonUpgrade golangUpgrade golang-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade criu-develUpgrade podman-remoteUpgrade containers-commonUpgrade libslirpUpgrade libslirp-develUpgrade go-toolsetUpgrade crunUpgrade grafanaUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade criu-libsUpgrade delveUpgrade slirp4netnsUpgrade golang-docsUpgrade critUpgrade grafana-pcp | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-context-develUpgrade golang-srcUpgrade golang-docsUpgrade runcUpgrade runc-debuginfoUpgrade golang-binUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade go-rpm-macrosUpgrade golang-miscUpgrade golang-googlecode-net-develUpgrade golangUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golist-debuginfo | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golistUpgrade golang-docsUpgrade golist-debugsourceUpgrade golang-binUpgrade golang-srcUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golang-race | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade skopeo-debuginfoUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade grafanaUpgrade podman-testsUpgrade golang-miscUpgrade libslirpUpgrade netavarkUpgrade toolboxUpgrade podman-pluginsUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade crunUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade libslirp-develUpgrade conmonUpgrade golang-srcUpgrade buildah-debugsourceUpgrade golangUpgrade golang-testsUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade podman-catatonitUpgrade go-toolsetUpgrade toolbox-testsUpgrade buildahUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade podman-debugsourceUpgrade golang-binUpgrade criu-develUpgrade critUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade udicaUpgrade skopeoUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade grafana-pcpUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade delveUpgrade criu | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criuUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade grafana-pcpUpgrade skopeoUpgrade buildah-testsUpgrade aardvark-dnsUpgrade golang-docsUpgrade golang-testsUpgrade udicaUpgrade critUpgrade golangUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade golang-binUpgrade buildahUpgrade netavarkUpgrade podman-dockerUpgrade podmanUpgrade podman-remoteUpgrade python3-podmanUpgrade golang-miscUpgrade runcUpgrade podman-gvproxyUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade golang-srcUpgrade delveUpgrade containers-commonUpgrade libslirp-develUpgrade criu-develUpgrade grafanaUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade conmonUpgrade container-selinuxUpgrade podman-testsUpgrade podman-pluginsUpgrade libslirpUpgrade criu-libsUpgrade slirp4netnsUpgrade python3-criu | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade buildahUpgrade runcUpgrade cri-toolsUpgrade kernel-rtUpgrade haproxyUpgrade ignitionUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade butaneUpgrade podmanUpgrade crunUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade toolboxUpgrade cri-oUpgrade openshift-clientsUpgrade skopeoUpgrade container-selinuxUpgrade conmon | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade golang-testsUpgrade podman-remote-debuginfoUpgrade conmonUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade libslirpUpgrade delveUpgrade podman-testsUpgrade grafana-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade delve-debugsourceUpgrade golang-raceUpgrade podman-pluginsUpgrade skopeo-testsUpgrade netavarkUpgrade toolboxUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade criu-develUpgrade golang-miscUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade crunUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade criu-debuginfoUpgrade podman-debugsourceUpgrade golangUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade buildah-debuginfoNo solution existsUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade go-toolsetUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-libsUpgrade toolbox-testsUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade crun-debugsourceUpgrade buildahUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade golang-srcUpgrade grafana-pcpUpgrade grafanaUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade critUpgrade python3-criuUpgrade runcUpgrade udicaUpgrade podman-plugins-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade buildah-testsUpgrade criu-develUpgrade python3-criuUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade grafanaUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade grafana-pcpUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade delveUpgrade go-toolsetUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade runcUpgrade containers-commonUpgrade criu-libsUpgrade runc-debuginfoUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade golang-raceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade skopeo-debugsourceUpgrade libslirpUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade toolboxUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade skopeoUpgrade toolbox-debugsourceUpgrade golang-binUpgrade podman-testsUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade criu | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.17Upgrade go1.17-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13-srcUpgrade golang-1.16-goUpgrade golang-1.16-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub