A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-catatonitUpgrade butaneUpgrade udicaUpgrade critUpgrade containernetworking-pluginsUpgrade criuUpgrade podman-dockerUpgrade buildahUpgrade netavarkUpgrade podmanUpgrade aardvark-dnsUpgrade runcUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podman-pluginsUpgrade skopeoUpgrade python3-criuUpgrade crunUpgrade toolboxUpgrade cockpit-podmanUpgrade libslirp-develUpgrade skopeo-testsUpgrade criu-develUpgrade git-lfsUpgrade buildah-testsUpgrade criu-libsUpgrade weldr-clientUpgrade libslirpUpgrade conmonUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade python3-podmanUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade podman-tests | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-misc | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-sharedUpgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-tests | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade delveUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade osbuild-selinuxUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade cockpit-composerUpgrade conmonUpgrade toolboxUpgrade criu-debuginfoUpgrade golang-miscUpgrade podmanUpgrade slirp4netns-debugsourceUpgrade osbuild-lvm2Upgrade weldr-client-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade netavarkUpgrade toolbox-debugsourceUpgrade osbuild-ostreeUpgrade podman-catatonitUpgrade osbuild-composer-coreUpgrade golang-testsUpgrade libslirpUpgrade libslirp-develUpgrade butaneUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade weldr-client-tests-debuginfoUpgrade crunUpgrade conmon-debugsourceUpgrade golang-binUpgrade butane-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade containers-commonUpgrade skopeo-testsUpgrade git-lfs-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade podman-debugsourceUpgrade osbuild-composer-workerUpgrade podman-debuginfoUpgrade go-toolsetUpgrade udicaUpgrade golang-docsUpgrade golangUpgrade skopeo-debugsourceUpgrade delve-debuginfoUpgrade aardvark-dnsUpgrade python3-osbuildUpgrade osbuild-luks2Upgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade python3-criuUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuildUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade git-lfsUpgrade weldr-clientUpgrade osbuild-composer-debuginfoUpgrade container-selinuxUpgrade critUpgrade buildah-debuginfoUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composerUpgrade criu-libs-debuginfoUpgrade weldr-client-debuginfoUpgrade skopeo-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade buildahUpgrade toolbox-testsUpgrade golang-srcUpgrade podman-dockerUpgrade cockpit-podmanUpgrade osbuild-composer-tests-debuginfoUpgrade butane-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade osbuild-composer-worker-debuginfo | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade delveUpgrade osbuild-composer-dnf-jsonUpgrade criu-develUpgrade osbuild-lvm2Upgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade container-selinuxUpgrade python3-criuUpgrade skopeo-testsUpgrade criu-libsUpgrade golang-docsUpgrade go-toolsetUpgrade crunUpgrade libslirpUpgrade osbuild-selinuxUpgrade slirp4netnsUpgrade weldr-clientUpgrade osbuild-ostreeUpgrade podman-gvproxyUpgrade git-lfsUpgrade cockpit-composerUpgrade libslirp-develUpgrade podman-pluginsUpgrade osbuild-composer-workerUpgrade osbuild-luks2Upgrade buildahUpgrade golang-raceUpgrade skopeoUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade podman-testsUpgrade podman-dockerUpgrade critUpgrade runcUpgrade podman-remoteUpgrade criuUpgrade golang-binUpgrade golang-testsUpgrade aardvark-dnsUpgrade podmanUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade conmonUpgrade python3-osbuildUpgrade netavarkUpgrade golangUpgrade osbuildUpgrade golang-srcUpgrade udicaUpgrade osbuild-composerUpgrade buildah-tests | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade cri-oUpgrade butaneUpgrade cri-toolsUpgrade ignition | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade toolboxUpgrade podman-debuginfoUpgrade osbuild-lvm2Upgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade cockpit-composerUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade golang-raceUpgrade crunUpgrade criu-libsUpgrade libslirp-develUpgrade containers-commonUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade osbuild-ostreeUpgrade osbuildUpgrade podman-pluginsUpgrade netavarkUpgrade osbuild-composer-tests-debuginfoUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debugsourceUpgrade criu-develUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade osbuild-composer-dnf-jsonUpgrade python3-podmanUpgrade skopeoUpgrade butaneUpgrade delve-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podmanUpgrade udicaUpgrade criuNo solution existsUpgrade conmonUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-selinuxUpgrade delveUpgrade osbuild-composerUpgrade weldr-client-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade aardvark-dnsUpgrade weldr-client-tests-debuginfoUpgrade weldr-client-debuginfoUpgrade critUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-workerUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade git-lfs-debuginfoUpgrade golangUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade butane-debugsourceUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade python3-osbuildUpgrade skopeo-debugsourceUpgrade golang-srcUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade butane-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade python3-criuUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade osbuild-luks2Upgrade git-lfsUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade weldr-clientUpgrade criu-debugsourceUpgrade podman-testsUpgrade libslirpUpgrade go-toolsetUpgrade golang-docs | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade weldr-clientUpgrade criuUpgrade python3-criuUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade critUpgrade weldr-client-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade criu-libsUpgrade git-lfsUpgrade libslirpUpgrade weldr-client-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.17-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.18Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub