Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade golang-docsUpgrade crunUpgrade skopeoUpgrade runcUpgrade delveUpgrade skopeo-testsUpgrade conmonUpgrade criu-develUpgrade podman-pluginsUpgrade libslirpUpgrade criu-libsUpgrade grafanaUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade toolboxUpgrade podman-testsUpgrade git-lfsUpgrade libslirp-develUpgrade go-toolsetUpgrade critUpgrade python3-criuUpgrade podman-remoteUpgrade containers-commonUpgrade buildahUpgrade python3-podmanUpgrade podmanUpgrade netavarkUpgrade podman-dockerUpgrade podman-catatonitUpgrade golangUpgrade toolbox-testsUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade grafana-pcpUpgrade cockpit-podmanUpgrade golang-raceUpgrade criuUpgrade aardvark-dnsUpgrade golang-bin | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade golist-debuginfoUpgrade go-rpm-macrosUpgrade go-srpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-templatesUpgrade golang-testsUpgrade go-filesystemUpgrade golang-miscUpgrade golang-sharedUpgrade golang-googlecode-net-develUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-docsUpgrade golang-binUpgrade runc-debuginfoUpgrade runcUpgrade golang-github-gorilla-context-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-src | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debugsourceUpgrade golang-sharedUpgrade golang-binUpgrade golistUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golang-miscUpgrade golang-testsUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade netavarkUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade golang-raceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade podman-dockerUpgrade podman-gvproxyUpgrade grafana-debuginfoUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade toolboxUpgrade conmonUpgrade toolbox-testsUpgrade crunUpgrade git-lfs-debugsourceUpgrade libslirpUpgrade podman-pluginsUpgrade podman-testsUpgrade grafana-pcp-debuginfoUpgrade delveUpgrade python3-podmanUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade golang-docsUpgrade buildah-testsUpgrade udicaUpgrade buildahUpgrade criuUpgrade delve-debuginfoUpgrade criu-libsUpgrade criu-debuginfoUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade golang-miscUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade podman-remote-debuginfoUpgrade git-lfsUpgrade aardvark-dnsUpgrade git-lfs-debuginfoUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade criu-debugsourceUpgrade critUpgrade golangUpgrade buildah-debuginfoUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade python3-criuUpgrade libslirpUpgrade slirp4netnsUpgrade golang-srcUpgrade container-selinuxUpgrade podman-testsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade libslirp-develUpgrade python3-podmanUpgrade aardvark-dnsUpgrade grafanaUpgrade delveUpgrade criu-develUpgrade containers-commonUpgrade buildah-testsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade conmonUpgrade git-lfsUpgrade crunUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade podmanUpgrade podman-pluginsUpgrade buildahUpgrade criuUpgrade golang-raceUpgrade grafana-pcpUpgrade skopeoUpgrade runcUpgrade udicaUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade golang-testsUpgrade podman-dockerUpgrade golang-binUpgrade golangUpgrade critUpgrade golang-miscUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade podman-remote | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-plugins-debuginfoUpgrade grafana-pcpUpgrade git-lfsUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-debugsourceUpgrade delveUpgrade slirp4netns-debugsourceUpgrade critUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade libslirp-develUpgrade crun-debugsourceUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade golang-docsUpgrade skopeo-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade grafanaUpgrade golang-binUpgrade skopeoUpgrade python3-podmanUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade netavarkUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-testsUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade golangUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade golang-miscNo solution existsUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade runcUpgrade podman-debuginfoUpgrade grafana-debuginfoUpgrade git-lfs-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade buildahUpgrade git-lfs-debugsourceUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade podmanUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade udicaUpgrade toolboxUpgrade delve-debugsourceUpgrade slirp4netnsUpgrade toolbox-debugsourceUpgrade conmonUpgrade podman-gvproxyUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade golang-srcUpgrade buildah-tests | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade libslirpUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade criu-libsUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade delveUpgrade libslirp-debugsourceUpgrade crunUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade git-lfsUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade skopeoUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade criuUpgrade golangUpgrade toolboxUpgrade delve-debugsourceUpgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade podmanUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade grafana-debuginfoUpgrade toolbox-testsUpgrade golang-binUpgrade buildah-testsUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade criu-libs-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-srcUpgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub