Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-pcpUpgrade golang-srcUpgrade golang-raceUpgrade slirp4netnsUpgrade golang-miscUpgrade python3-podmanUpgrade golangUpgrade golang-binUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade criuUpgrade golang-testsUpgrade cockpit-podmanUpgrade buildahUpgrade podman-dockerUpgrade podmanUpgrade podman-catatonitUpgrade netavarkUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade grafanaUpgrade conmonUpgrade git-lfsUpgrade container-selinuxUpgrade runcUpgrade toolboxUpgrade critUpgrade podman-testsUpgrade libslirp-develUpgrade python3-criuUpgrade criu-libsUpgrade skopeo-testsUpgrade golang-docsUpgrade libslirpUpgrade go-toolsetUpgrade criu-develUpgrade containers-commonUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade crunUpgrade udicaUpgrade delveUpgrade containernetworking-plugins | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-srpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade golang-raceUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade golistUpgrade go-rpm-templatesUpgrade go-rpm-macrosUpgrade runcUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-net-develUpgrade golang-miscUpgrade go-filesystemUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-sharedUpgrade golang-testsUpgrade golang-github-syndtr-gocapability-develUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade runc-debuginfo | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-raceUpgrade golang-testsUpgrade golist-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-github-cpuguy83-md2manUpgrade golangUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golist-debugsource | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade netavarkUpgrade git-lfs-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade crunUpgrade libslirp-debugsourceUpgrade delveUpgrade podman-testsUpgrade slirp4netnsUpgrade toolboxUpgrade grafana-pcp-debuginfoUpgrade toolbox-testsUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade golang-raceUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade podman-dockerUpgrade podman-gvproxyUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade grafanaUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade critUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade golang-docsUpgrade criu-libsUpgrade criuUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade delve-debuginfoUpgrade golangUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade git-lfsUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade golang-miscUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade udica | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade cockpit-podmanUpgrade go-toolsetUpgrade python3-criuUpgrade buildah-testsUpgrade git-lfsUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade crunUpgrade libslirp-develUpgrade libslirpUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade containers-commonUpgrade conmonUpgrade delveUpgrade grafanaUpgrade criu-develUpgrade container-selinuxUpgrade aardvark-dnsUpgrade golang-srcUpgrade slirp4netnsUpgrade python3-podmanUpgrade criu-libsUpgrade golang-raceUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade udicaUpgrade runcUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade buildahUpgrade podman-remoteUpgrade podman-pluginsUpgrade skopeoUpgrade netavarkUpgrade criuUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade critUpgrade golangUpgrade grafana-pcpUpgrade podmanUpgrade podman-docker | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade udicaUpgrade python3-podmanUpgrade conmonUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade golang-testsUpgrade golang-binUpgrade conmon-debugsourceUpgrade podman-testsUpgrade golang-miscUpgrade runcUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade git-lfs-debuginfoUpgrade buildah-debuginfoUpgrade criuUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade grafana-debuginfoUpgrade netavarkNo solution existsUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade golang-raceUpgrade toolbox-debugsourceUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade golang-srcUpgrade skopeoUpgrade podman-remoteUpgrade toolboxUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade golangUpgrade slirp4netnsUpgrade podman-dockerUpgrade grafana-pcp-debuginfoUpgrade criu-libs-debuginfoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade delve-debuginfoUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade grafanaUpgrade crun-debuginfoUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade delveUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade container-selinuxUpgrade libslirpUpgrade crun-debugsourceUpgrade critUpgrade golang-docsUpgrade podman-debugsourceUpgrade grafana-pcpUpgrade libslirp-develUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade git-lfsUpgrade toolbox-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade crunUpgrade git-lfsUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade criu-develUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade delveUpgrade libslirpUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade skopeoUpgrade criu-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade grafana-pcp-debuginfoUpgrade toolboxUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade criuUpgrade golangUpgrade crun-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade golang-raceUpgrade runcUpgrade golang-binUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade conmon | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.18-srcUpgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub