Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade toolbox-testsUpgrade golangUpgrade buildahUpgrade podman-dockerUpgrade netavarkUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade grafana-pcpUpgrade podmanUpgrade slirp4netnsUpgrade criuUpgrade python3-podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-catatonitUpgrade golang-binUpgrade podman-pluginsUpgrade udicaUpgrade skopeoUpgrade crunUpgrade libslirpUpgrade containernetworking-pluginsUpgrade criu-develUpgrade container-selinuxUpgrade delveUpgrade podman-remoteUpgrade critUpgrade git-lfsUpgrade podman-testsUpgrade containers-commonUpgrade skopeo-testsUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade golang-docsUpgrade criu-libsUpgrade python3-criuUpgrade go-toolsetUpgrade grafanaUpgrade libslirp-develUpgrade toolbox | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-github-gorilla-context-develUpgrade runcUpgrade golang-github-syndtr-gocapability-develUpgrade go-filesystemUpgrade golang-sharedUpgrade golang-srcUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade runc-debuginfoUpgrade golang-miscUpgrade golang-googlecode-net-develUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-sqlite-develUpgrade go-rpm-templatesUpgrade golang-github-godbus-dbus-develUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade golist-debuginfoUpgrade go-rpm-macrosUpgrade go-srpm-macros | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-develUpgrade libslirp-debugsourceUpgrade netavarkUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade slirp4netnsUpgrade delveUpgrade libslirpUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade conmonUpgrade crunUpgrade toolboxUpgrade git-lfs-debugsourceUpgrade crun-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade podman-testsUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade slirp4netns-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-podmanUpgrade podman-dockerUpgrade podman-gvproxyUpgrade grafana-pcp-debuginfoUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-docsUpgrade criu-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade golangUpgrade criu-debugsourceUpgrade critUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade git-lfs-debuginfoUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade runc-debugsourceUpgrade udicaUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade criu-libsUpgrade criuUpgrade delve-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade golang-srcUpgrade git-lfsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade delveUpgrade conmonUpgrade grafanaUpgrade python3-podmanUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade crunUpgrade libslirp-develUpgrade containers-commonUpgrade criu-develUpgrade buildah-testsUpgrade cockpit-podmanUpgrade go-toolsetUpgrade python3-criuUpgrade golangUpgrade golang-testsUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade udicaUpgrade golang-miscUpgrade critUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade golang-binUpgrade podman-remoteUpgrade buildahUpgrade runcUpgrade skopeoUpgrade netavarkUpgrade podman-dockerUpgrade grafana-pcpUpgrade podmanUpgrade podman-pluginsUpgrade criu | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade grafana-pcpUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfsUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade delveUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade python3-criuUpgrade libslirpUpgrade delve-debuginfoUpgrade libslirp-debugsourceUpgrade go-toolsetUpgrade grafanaUpgrade libslirp-debuginfoUpgrade podmanUpgrade grafana-pcp-debuginfoNo solution existsUpgrade golang-testsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade golangUpgrade conmon-debugsourceUpgrade python3-podmanUpgrade conmonUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade runcUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade netavarkUpgrade podman-testsUpgrade cockpit-podmanUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade buildahUpgrade git-lfs-debugsourceUpgrade golang-binUpgrade golang-srcUpgrade podman-gvproxyUpgrade udicaUpgrade slirp4netnsUpgrade toolboxUpgrade golang-race | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade criuUpgrade skopeo-debugsourceUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade grafana-debuginfoUpgrade podmanUpgrade crun-debugsourceUpgrade toolboxUpgrade golangUpgrade skopeoUpgrade toolbox-debugsourceUpgrade delve-debugsourceUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade runcUpgrade conmonUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade crunUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade git-lfsUpgrade critUpgrade conmon-debuginfoUpgrade criu-develUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade go-toolsetUpgrade delveUpgrade libslirpUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18-openssl-raceUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.18Upgrade golang-1.13Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub