Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade podman-catatonitUpgrade runcUpgrade buildah-testsUpgrade golangUpgrade golang-testsUpgrade podman-testsUpgrade conmonUpgrade toolboxUpgrade containernetworking-pluginsUpgrade skopeoUpgrade netavarkUpgrade python3-podmanUpgrade cockpit-podmanUpgrade golang-binUpgrade criuUpgrade buildahUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade golang-srcUpgrade podmanUpgrade toolbox-testsUpgrade podman-dockerUpgrade udicaUpgrade golang-raceUpgrade delveUpgrade slirp4netnsUpgrade libslirp-develUpgrade go-toolsetUpgrade libslirpUpgrade criu-develUpgrade container-selinuxUpgrade crunUpgrade skopeo-testsUpgrade podman-pluginsUpgrade golang-docsUpgrade critUpgrade criu-libsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade grafana-pcpUpgrade python3-criuUpgrade podman-remote | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-kr-pty-develUpgrade golang-testsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-github-gorilla-context-develUpgrade runc-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade runcUpgrade go-rpm-macrosUpgrade golang-googlecode-net-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golistUpgrade golangUpgrade golist-debuginfoUpgrade go-filesystemUpgrade golang-miscUpgrade golang-github-godbus-dbus-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-srcUpgrade golang-sharedUpgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade golang-github-cpuguy83-md2manUpgrade golist-debugsourceUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debuginfoUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golistUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-misc | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade podman-pluginsUpgrade toolboxUpgrade fuse-overlayfsUpgrade conmonUpgrade criu-libsUpgrade buildah-debuginfoUpgrade crunUpgrade runc-debuginfoUpgrade golang-miscUpgrade podman-testsUpgrade podman-dockerUpgrade grafanaUpgrade netavarkUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade golang-raceUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade delve-debugsourceUpgrade libslirp-develUpgrade skopeo-testsUpgrade golang-docsUpgrade udicaUpgrade skopeoUpgrade golang-testsUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade grafana-pcpUpgrade podman-debuginfoUpgrade golang-binUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade go-toolsetUpgrade delveUpgrade criuUpgrade runcUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade toolbox-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-raceUpgrade aardvark-dnsUpgrade golangUpgrade runcUpgrade podmanUpgrade golang-miscUpgrade grafana-pcpUpgrade skopeoUpgrade golang-docsUpgrade critUpgrade podman-catatonitUpgrade golang-testsUpgrade buildah-testsUpgrade golang-binUpgrade criuUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade udicaUpgrade podman-remoteUpgrade python3-podmanUpgrade buildahUpgrade containernetworking-pluginsUpgrade netavarkUpgrade python3-criuUpgrade go-toolsetUpgrade crunUpgrade podman-testsUpgrade criu-develUpgrade containers-commonUpgrade container-selinuxUpgrade golang-srcUpgrade delveUpgrade cockpit-podmanUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade podman-gvproxyUpgrade criu-libsUpgrade skopeo-testsUpgrade grafanaUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmon | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade fuse-overlayfsUpgrade kernel-rtUpgrade slirp4netnsUpgrade runcUpgrade haproxyUpgrade buildahUpgrade cri-toolsUpgrade containers-commonUpgrade podmanUpgrade skopeoUpgrade conmonUpgrade cri-oUpgrade crunUpgrade openshift-clientsUpgrade container-selinuxUpgrade toolboxUpgrade butaneUpgrade containernetworking-plugins | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade conmon-debugsourceUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade grafana-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade delveUpgrade golang-raceUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade podman-dockerUpgrade delve-debugsourceUpgrade crunUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade skopeo-debuginfoUpgrade golang-testsUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade golang-miscUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade netavarkUpgrade skopeoUpgrade python3-podmanUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade go-toolsetUpgrade critUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade criu-libsUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade crun-debugsourceUpgrade python3-criuUpgrade grafana-pcpUpgrade containers-commonUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade grafanaUpgrade containernetworking-pluginsUpgrade udicaUpgrade libslirp-debugsourceUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookNo solution existsUpgrade libslirp-develUpgrade buildah-testsUpgrade grafana-pcp-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade criu-debugsourceUpgrade runcUpgrade golang-binUpgrade libslirp-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade delveUpgrade go-toolsetUpgrade python3-criuUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade buildah-testsUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade grafana-pcpUpgrade grafanaUpgrade criu-debugsourceUpgrade criu-libsUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade containers-commonUpgrade criuUpgrade buildah-debuginfoUpgrade podman-testsUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade golang-raceUpgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade golang-binUpgrade golangUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade libslirpUpgrade delve-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade toolboxUpgrade skopeoUpgrade toolbox-testsUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.17-docUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.18-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.13-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub