Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-srcUpgrade criuUpgrade golang-testsUpgrade golang-binUpgrade python3-podmanUpgrade netavarkUpgrade podman-catatonitUpgrade buildah-testsUpgrade golang-miscUpgrade podmanUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade golangUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade grafana-pcpUpgrade buildahUpgrade fuse-overlayfsUpgrade golang-raceUpgrade podman-dockerUpgrade grafanaUpgrade conmonUpgrade critUpgrade criu-libsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade runcUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podman-testsUpgrade python3-criuUpgrade libslirp-develUpgrade git-lfsUpgrade toolboxUpgrade criu-develUpgrade udicaUpgrade podman-remoteUpgrade golang-docsUpgrade delveUpgrade libslirpUpgrade skopeoUpgrade crun | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-mux-develUpgrade golang-github-godbus-dbus-develUpgrade golistUpgrade golist-debuginfoUpgrade golang-raceUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade go-rpm-macrosUpgrade golang-miscUpgrade golang-testsUpgrade golang-googlecode-net-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-github-gorilla-context-develUpgrade runc-debuginfoUpgrade runcUpgrade go-filesystemUpgrade golangUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golist-debuginfoUpgrade golang-srcUpgrade golang-raceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-testsUpgrade golistUpgrade golangUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-sharedUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade runcUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade golang-srcUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade criuUpgrade udicaUpgrade buildah-testsUpgrade delve-debuginfoUpgrade criu-libsUpgrade buildah-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade podman-debugsourceUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade go-toolsetUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade buildahUpgrade git-lfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade git-lfsUpgrade golang-testsUpgrade podman-debuginfoUpgrade golang-miscUpgrade grafana-pcpUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade critUpgrade criu-debugsourceUpgrade golangUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade python3-podmanUpgrade grafana-debuginfoUpgrade podman-testsUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade grafana-pcp-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade delveUpgrade slirp4netnsUpgrade podman-dockerUpgrade delve-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade golang-raceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade netavarkUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade crunUpgrade conmonUpgrade toolboxUpgrade skopeo-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade cockpit-podmanUpgrade skopeo-tests | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade golang-binUpgrade golang-docsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade podmanUpgrade podman-pluginsUpgrade runcUpgrade criuUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade grafana-pcpUpgrade buildahUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade udicaUpgrade netavarkUpgrade podman-dockerUpgrade critUpgrade grafanaUpgrade crunUpgrade conmonUpgrade criu-libsUpgrade git-lfsUpgrade skopeo-testsUpgrade delveUpgrade criu-develUpgrade containers-commonUpgrade buildah-testsUpgrade container-selinuxUpgrade slirp4netnsUpgrade golang-srcUpgrade aardvark-dnsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade podman-testsUpgrade libslirpUpgrade cockpit-podmanUpgrade python3-criuUpgrade go-toolsetUpgrade podman-gvproxy | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade netavarkUpgrade buildah-testsUpgrade golangUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade conmonUpgrade grafana-debuginfoUpgrade golang-miscUpgrade podman-debuginfoUpgrade git-lfs-debugsourceUpgrade udicaUpgrade runcUpgrade toolboxUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade golang-binUpgrade slirp4netnsUpgrade podmanUpgrade delve-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade git-lfs-debuginfoUpgrade podman-dockerUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade buildahNo solution existsUpgrade criu-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade skopeoUpgrade python3-podmanUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade golang-testsUpgrade crunUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxy-debuginfoUpgrade git-lfsUpgrade buildah-debugsourceUpgrade criu-libsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade podman-pluginsUpgrade libslirpUpgrade delveUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade golang-docsUpgrade grafana-pcpUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criu-develUpgrade delveUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade libslirpUpgrade go-toolsetUpgrade grafanaUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade delve-debuginfoUpgrade podman-testsUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade git-lfsUpgrade crunUpgrade git-lfs-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-debugsourceUpgrade golang-raceUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade skopeoUpgrade delve-debugsourceUpgrade toolboxUpgrade grafana-pcp-debuginfoUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade git-lfs-debugsourceUpgrade crun-debugsourceUpgrade golangUpgrade podmanUpgrade criuUpgrade golang-binUpgrade buildah-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-srcUpgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.13-goUpgrade golang-1.13Upgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub