Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade buildahUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade golang-raceUpgrade golang-srcUpgrade slirp4netnsUpgrade buildah-testsUpgrade netavarkUpgrade podman-gvproxyUpgrade golangUpgrade criuUpgrade podman-dockerUpgrade python3-podmanUpgrade grafana-pcpUpgrade podmanUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade criu-develUpgrade git-lfsUpgrade grafanaUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade delveUpgrade skopeoUpgrade container-selinuxUpgrade skopeo-testsUpgrade criu-libsUpgrade containers-commonUpgrade podman-pluginsUpgrade toolboxUpgrade python3-criuUpgrade crunUpgrade libslirpUpgrade udicaUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade critUpgrade podman-remoteUpgrade go-toolsetUpgrade runcUpgrade golang-docs | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golist-debuginfoUpgrade golang-raceUpgrade go-rpm-macrosUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-sqlite-develUpgrade golang-binUpgrade golang-testsUpgrade golang-sharedUpgrade golang-github-gorilla-context-develUpgrade runc-debuginfoUpgrade golangUpgrade runcUpgrade golang-github-syndtr-gocapability-develUpgrade go-filesystemUpgrade golang-srcUpgrade golang-miscUpgrade golang-docsUpgrade golang-googlecode-net-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golistUpgrade golang-github-cpuguy83-md2manUpgrade golang-miscUpgrade golang-raceUpgrade golist-debuginfoUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-testsUpgrade golangUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debugsourceUpgrade golang-shared | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade golang-srcUpgrade delve-debuginfoUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade criuUpgrade runcUpgrade conmon-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade go-toolsetUpgrade grafanaUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade golangUpgrade critUpgrade container-selinuxUpgrade udicaUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade buildahUpgrade golang-binUpgrade git-lfsUpgrade runc-debuginfoUpgrade golang-testsUpgrade runc-debugsourceUpgrade golang-miscUpgrade grafana-pcpUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade python3-podmanUpgrade git-lfs-debugsourceUpgrade toolboxUpgrade crun-debuginfoUpgrade golang-raceUpgrade grafana-debuginfoUpgrade conmonUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade cockpit-podmanUpgrade netavarkUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade podman-testsUpgrade delveUpgrade slirp4netnsUpgrade libslirpUpgrade toolbox-testsUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade delve-debugsourceUpgrade slirp4netns-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade podman-catatonitUpgrade critUpgrade golang-docsUpgrade grafana-pcpUpgrade podmanUpgrade netavarkUpgrade podman-pluginsUpgrade udicaUpgrade skopeoUpgrade containernetworking-pluginsUpgrade golangUpgrade golang-miscUpgrade buildahUpgrade runcUpgrade golang-raceUpgrade criuUpgrade golang-testsUpgrade podman-remoteUpgrade podman-dockerUpgrade golang-binUpgrade slirp4netnsUpgrade container-selinuxUpgrade python3-podmanUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade crunUpgrade libslirpUpgrade go-toolsetUpgrade python3-criuUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade git-lfsUpgrade conmonUpgrade golang-srcUpgrade aardvark-dnsUpgrade criu-develUpgrade grafanaUpgrade delveUpgrade containers-commonUpgrade buildah-testsUpgrade cockpit-podman | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade git-lfs-debuginfoUpgrade slirp4netnsUpgrade podmanUpgrade udicaUpgrade toolboxUpgrade golang-raceUpgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade buildahUpgrade delve-debugsourceUpgrade golang-binUpgrade podman-dockerUpgrade netavarkUpgrade cockpit-podmanUpgrade grafana-pcp-debuginfoUpgrade golang-testsUpgrade conmonUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade runcNo solution existsUpgrade skopeoUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade golangUpgrade golang-srcUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade criuUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade libslirpUpgrade delveUpgrade container-selinuxUpgrade criu-libsUpgrade golang-docsUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade crunUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-pcpUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade grafanaUpgrade conmon-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade skopeo-testsUpgrade python3-criuUpgrade critUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade podman-plugins | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criuUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade skopeoUpgrade toolbox-debugsourceUpgrade golang-raceUpgrade golang-binUpgrade toolboxUpgrade git-lfs-debugsourceUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade runcUpgrade grafana-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade grafana-pcpUpgrade buildahUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade conmonUpgrade skopeo-debuginfoUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade containers-commonUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade libslirpUpgrade criu-libsUpgrade crunUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade delveUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade criu-develUpgrade podman-pluginsUpgrade go-toolsetUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade libslirp-develUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade git-lfs | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.18Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub