Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade crunUpgrade runcUpgrade grafanaUpgrade criu-develUpgrade libslirpUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade udicaUpgrade skopeoUpgrade skopeo-testsUpgrade conmonUpgrade delveUpgrade podman-remoteUpgrade golang-docsUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade container-selinuxUpgrade podman-testsUpgrade podman-pluginsUpgrade toolboxUpgrade python3-criuUpgrade libslirp-develUpgrade criu-libsUpgrade go-toolsetUpgrade golang-miscUpgrade slirp4netnsUpgrade criuUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade golang-testsUpgrade buildah-testsUpgrade netavarkUpgrade golangUpgrade podman-catatonitUpgrade python3-podmanUpgrade buildahUpgrade podman-dockerUpgrade grafana-pcpUpgrade podmanUpgrade golang-srcUpgrade golang-raceUpgrade cockpit-podmanUpgrade golang-binUpgrade toolbox-testsUpgrade aardvark-dns | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golang-raceUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade go-rpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade golang-github-syndtr-gocapability-develUpgrade runc-debuginfoUpgrade go-filesystemUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-sqlite-develUpgrade golang-googlecode-net-develUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golang-sharedUpgrade golang-binUpgrade runcUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-develUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-docsUpgrade golangUpgrade golang-raceUpgrade golistUpgrade golang-miscUpgrade golist-debuginfoUpgrade golang-testsUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade golang-raceUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-dockerUpgrade libslirpUpgrade slirp4netnsUpgrade grafana-pcp-debuginfoUpgrade delveUpgrade criu-develUpgrade toolbox-testsUpgrade slirp4netns-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade crunUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade toolboxUpgrade skopeo-debuginfoUpgrade netavarkUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade criu-debugsourceUpgrade podman-remoteUpgrade criu-libsUpgrade grafanaUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade buildah-tests-debuginfoUpgrade criuUpgrade golang-docsUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade critUpgrade golangUpgrade skopeo-debugsourceUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade golang-miscUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade udicaUpgrade runc-debugsourceUpgrade git-lfs-debuginfoUpgrade toolbox-debugsourceUpgrade git-lfsUpgrade delve-debuginfoUpgrade golang-src | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade crunUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade python3-podmanUpgrade slirp4netnsUpgrade container-selinuxUpgrade aardvark-dnsUpgrade golang-srcUpgrade criu-libsUpgrade buildah-testsUpgrade containers-commonUpgrade skopeo-testsUpgrade criu-develUpgrade conmonUpgrade git-lfsUpgrade podman-gvproxyUpgrade delveUpgrade libslirpUpgrade podman-testsUpgrade python3-criuUpgrade cockpit-podmanUpgrade grafanaUpgrade golang-testsUpgrade golang-docsUpgrade udicaUpgrade golangUpgrade runcUpgrade golang-binUpgrade podman-pluginsUpgrade golang-raceUpgrade podman-catatonitUpgrade skopeoUpgrade podmanUpgrade grafana-pcpUpgrade criuUpgrade buildahUpgrade fuse-overlayfsUpgrade critUpgrade podman-remoteUpgrade podman-dockerUpgrade golang-miscUpgrade netavarkUpgrade containernetworking-plugins | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade containers-commonUpgrade grafanaUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade criu-libsUpgrade git-lfsUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade critUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade libslirpUpgrade podman-pluginsUpgrade delveUpgrade runc-debuginfoUpgrade grafana-pcpUpgrade golang-docsUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade libslirp-develUpgrade python3-criuUpgrade toolboxUpgrade golang-raceUpgrade udicaUpgrade podman-dockerUpgrade git-lfs-debuginfoUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade golangUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade buildahUpgrade podman-gvproxyUpgrade delve-debugsourceUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade skopeoUpgrade golang-binUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade golang-testsUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade podmanUpgrade runcUpgrade podman-debuginfoUpgrade grafana-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-miscNo solution existsUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcp-debuginfoUpgrade containernetworking-pluginsUpgrade criu | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade grafana-pcp-debuginfoUpgrade criuUpgrade git-lfs-debugsourceUpgrade golangUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade skopeoUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade grafana-pcpUpgrade buildahUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade grafana-debuginfoUpgrade golang-binUpgrade runcUpgrade buildah-testsUpgrade podman-debuginfoUpgrade go-toolsetUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade crunUpgrade criu-libsUpgrade containers-commonUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade libslirpUpgrade git-lfs-debuginfoUpgrade delveUpgrade grafanaUpgrade critUpgrade conmon-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade git-lfsUpgrade podman-remote-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.17-raceUpgrade go1.17Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.13-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub