Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade containers-commonUpgrade slirp4netnsUpgrade golang-docsUpgrade critUpgrade criu-libsUpgrade libslirpUpgrade criu-develUpgrade podman-pluginsUpgrade grafana-pcpUpgrade python3-criuUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-remoteUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade crunUpgrade delveUpgrade udicaUpgrade runcUpgrade podman-catatonitUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade criuUpgrade fuse-overlayfsUpgrade golang-binUpgrade python3-podmanUpgrade podman-dockerUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade toolboxUpgrade netavarkUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildahUpgrade skopeoUpgrade podman-testsUpgrade podmanUpgrade conmonUpgrade golangUpgrade podman-gvproxy | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-srcUpgrade runcUpgrade golang-github-gorilla-context-develUpgrade golang-testsUpgrade golang-googlecode-sqlite-develUpgrade golang-binUpgrade runc-debuginfoUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade golangUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade golistUpgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-net-develUpgrade go-rpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-misc | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golist-debuginfoUpgrade golang-miscUpgrade golistUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade golang-testsUpgrade aardvark-dnsUpgrade critUpgrade podmanUpgrade python3-criuUpgrade toolbox-testsUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade skopeoUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade delveUpgrade go-toolsetUpgrade container-selinuxUpgrade grafana-pcpUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golang-docsUpgrade podman-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade runcUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade golang-binUpgrade podman-debugsourceUpgrade python3-podmanUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade grafanaUpgrade golangUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade golang-srcUpgrade fuse-overlayfs-debuginfoUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade criu-libsUpgrade conmonUpgrade buildah-debuginfoUpgrade toolboxUpgrade podman-pluginsUpgrade podman-testsUpgrade golang-miscUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade libslirpUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade slirp4netns | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade crunUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-pluginsUpgrade libslirp-develUpgrade criu-develUpgrade libslirpUpgrade go-toolsetUpgrade containers-commonUpgrade skopeo-testsUpgrade delveUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade criu-libsUpgrade python3-criuUpgrade podman-testsUpgrade container-selinuxUpgrade conmonUpgrade podman-catatonitUpgrade golang-docsUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade skopeoUpgrade grafana-pcpUpgrade golang-testsUpgrade runcUpgrade golang-miscUpgrade critUpgrade buildahUpgrade aardvark-dnsUpgrade golang-raceUpgrade udicaUpgrade podmanUpgrade podman-dockerUpgrade netavarkUpgrade golang-binUpgrade podman-remoteUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade criuUpgrade golang | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade slirp4netnsUpgrade cri-toolsUpgrade runcUpgrade fuse-overlayfsUpgrade kernel-rtUpgrade buildahUpgrade haproxyUpgrade skopeoUpgrade containers-commonUpgrade openshift-clientsUpgrade crunUpgrade containernetworking-pluginsUpgrade toolboxUpgrade butaneUpgrade cri-oUpgrade container-selinuxUpgrade conmonUpgrade podman | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-pluginsUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade crunUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade netavarkUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade delve-debugsourceUpgrade python3-podmanUpgrade podman-testsUpgrade criu-develUpgrade slirp4netnsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade golang-testsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade toolboxUpgrade conmonUpgrade golang-miscUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade skopeo-debuginfoUpgrade skopeoUpgrade podmanUpgrade python3-criuUpgrade container-selinuxUpgrade grafana-pcpUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade containers-commonUpgrade runc-debugsourceUpgrade buildah-testsUpgrade toolbox-testsUpgrade libslirp-develUpgrade go-toolsetUpgrade golang-srcUpgrade podman-debugsourceUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade conmon-debuginfoNo solution existsUpgrade delve-debuginfoUpgrade buildahUpgrade grafana-pcp-debuginfoUpgrade criu-libsUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade critUpgrade toolbox-debugsourceUpgrade runcUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade udicaUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade golang-binUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dns | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade buildah-testsUpgrade grafana-pcpUpgrade python3-criuUpgrade criu-debugsourceUpgrade runcUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade grafanaUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-remoteUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade delveUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade containers-commonUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade critUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade golang-raceUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade crunUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade grafana-pcp-debuginfoUpgrade golang-binUpgrade crun-debugsourceUpgrade golangUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade criuUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade delve-debugsourceUpgrade toolboxUpgrade libslirp | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub