Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade criu-develUpgrade skopeo-testsUpgrade libslirp-develUpgrade git-lfsUpgrade podman-testsUpgrade container-selinuxUpgrade toolboxUpgrade python3-criuUpgrade podman-remoteUpgrade conmonUpgrade critUpgrade skopeoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade go-toolsetUpgrade grafanaUpgrade containernetworking-pluginsUpgrade udicaUpgrade crunUpgrade runcUpgrade criu-libsUpgrade golang-docsUpgrade delveUpgrade cockpit-podmanUpgrade golang-testsUpgrade golang-srcUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podmanUpgrade podman-dockerUpgrade python3-podmanUpgrade buildahUpgrade buildah-testsUpgrade golang-miscUpgrade grafana-pcpUpgrade netavarkUpgrade golang-raceUpgrade criuUpgrade golangUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade golang-bin | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade runcUpgrade golang-sharedUpgrade golang-testsUpgrade golang-github-syndtr-gocapability-develUpgrade go-filesystemUpgrade golang-binUpgrade golang-github-gorilla-context-develUpgrade golang-srcUpgrade golang-miscUpgrade golang-googlecode-net-develUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade go-srpm-macrosUpgrade golang-raceUpgrade golist-debuginfoUpgrade go-rpm-templatesUpgrade go-rpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade golistUpgrade golang-github-gorilla-mux-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-miscUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-testsUpgrade golang-raceUpgrade golang-srcUpgrade golistUpgrade golangUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade crunUpgrade git-lfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade libslirpUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade toolboxUpgrade podman-dockerUpgrade podman-testsUpgrade toolbox-testsUpgrade netavarkUpgrade conmonUpgrade delveUpgrade grafana-debuginfoUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade golang-raceUpgrade containernetworking-plugins-debuginfoUpgrade grafana-pcp-debuginfoUpgrade python3-podmanUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade git-lfs-debuginfoUpgrade aardvark-dnsUpgrade git-lfsUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade udicaUpgrade podman-debugsourceUpgrade golang-binUpgrade grafanaUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade buildah-tests-debuginfoUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade golang-miscUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade conmon-debuginfoUpgrade runcUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade fuse-overlayfs-debugsourceUpgrade golang-docsUpgrade criu-libsUpgrade criuUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade podman-remoteUpgrade golangUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade critUpgrade buildah | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade conmonUpgrade git-lfsUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-gvproxyUpgrade delveUpgrade criu-develUpgrade containers-commonUpgrade buildah-testsUpgrade grafanaUpgrade go-toolsetUpgrade golang-srcUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade container-selinuxUpgrade podman-testsUpgrade libslirpUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade crunUpgrade criu-libsUpgrade skopeo-testsUpgrade podman-remoteUpgrade golang-docsUpgrade golang-binUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade golang-testsUpgrade udicaUpgrade critUpgrade podman-catatonitUpgrade golang-raceUpgrade grafana-pcpUpgrade netavarkUpgrade podmanUpgrade golang-miscUpgrade podman-dockerUpgrade golangUpgrade podman-pluginsUpgrade skopeoUpgrade buildahUpgrade criuUpgrade runc | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade grafanaUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade delve-debuginfoUpgrade criu-libsUpgrade libslirpUpgrade delveUpgrade podman-pluginsUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade crunUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade criu-develUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade grafana-pcpUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-docsUpgrade criuUpgrade buildah-testsUpgrade golang-raceUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade udicaUpgrade slirp4netnsUpgrade toolboxUpgrade podmanUpgrade delve-debugsourceUpgrade golang-binUpgrade skopeo-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade netavarkUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade git-lfs-debuginfoUpgrade podman-dockerUpgrade grafana-pcp-debuginfoUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade python3-podmanUpgrade buildah-tests-debuginfoNo solution existsUpgrade podman-debuginfoUpgrade grafana-debuginfoUpgrade runcUpgrade golang-miscUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade golang-testsUpgrade criu-libs-debuginfoUpgrade golang-srcUpgrade conmonUpgrade golangUpgrade toolbox-testsUpgrade toolbox-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade toolbox-testsUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcp-debuginfoUpgrade skopeoUpgrade toolboxUpgrade conmon-debugsourceUpgrade buildahUpgrade golang-binUpgrade skopeo-debugsourceUpgrade conmonUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade criuUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade git-lfs-debugsourceUpgrade runcUpgrade buildah-testsUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade grafana-pcpUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade grafana-debuginfoUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade skopeo-testsUpgrade podman-testsUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade libslirpUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade git-lfsUpgrade critUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade skopeo-debuginfoUpgrade crunUpgrade criu-libsUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade delveUpgrade podman-plugins | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.18-raceUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.18-opensslUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13-goUpgrade golang-1.16-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub