A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-catatonitUpgrade criuUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade netavarkUpgrade skopeoUpgrade python3-criuUpgrade crunUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade podmanUpgrade udicaUpgrade fuse-overlayfsUpgrade buildahUpgrade toolbox-testsUpgrade runcUpgrade toolboxUpgrade butaneUpgrade critUpgrade podman-remoteUpgrade git-lfsUpgrade criu-libsUpgrade libslirpUpgrade podman-testsUpgrade cockpit-podmanUpgrade criu-develUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade buildah-testsUpgrade weldr-clientUpgrade containers-commonUpgrade libslirp-develUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade container-selinux | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-raceUpgrade golang-srcUpgrade golang-shared | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-docs | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade container-selinuxUpgrade osbuild-composer-debuginfoUpgrade weldr-clientUpgrade buildahUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade golangUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade golang-docsUpgrade osbuild-composerUpgrade runcUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade udicaUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade git-lfsUpgrade weldr-client-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade toolbox-debuginfoUpgrade osbuild-composer-workerUpgrade golang-srcUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade critUpgrade osbuild-luks2Upgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade python3-osbuildUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade osbuildUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade python3-criuUpgrade podman-debuginfoUpgrade podman-dockerUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade butane-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade toolboxUpgrade criuUpgrade conmon-debugsourceUpgrade golang-binUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade git-lfs-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade butaneUpgrade weldr-client-debugsourceUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade osbuild-lvm2Upgrade podman-catatonitUpgrade weldr-client-tests-debuginfoUpgrade osbuild-ostreeUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade golang-testsUpgrade butane-debuginfoUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade osbuild-composer-debugsourceUpgrade golang-miscUpgrade golang-raceUpgrade skopeo-testsUpgrade libslirpUpgrade crunUpgrade podman-testsUpgrade conmonUpgrade cockpit-composerUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade delve-debugsourceUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade delve | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golangUpgrade podman-dockerUpgrade buildahUpgrade golang-binUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade runcUpgrade critUpgrade skopeoUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade golang-raceUpgrade udicaUpgrade podman-testsUpgrade podman-catatonitUpgrade conmonUpgrade buildah-testsUpgrade netavarkUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade podmanUpgrade golang-miscUpgrade golang-srcUpgrade aardvark-dnsUpgrade osbuildUpgrade golang-testsUpgrade python3-osbuildUpgrade podman-remoteUpgrade criuUpgrade slirp4netnsUpgrade skopeo-testsUpgrade osbuild-luks2Upgrade cockpit-composerUpgrade git-lfsUpgrade containers-commonUpgrade podman-pluginsUpgrade crunUpgrade osbuild-composer-workerUpgrade osbuild-ostreeUpgrade libslirp-develUpgrade weldr-clientUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade osbuild-selinuxUpgrade criu-develUpgrade golang-docsUpgrade python3-criuUpgrade osbuild-lvm2Upgrade criu-libsUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade container-selinuxUpgrade podman-gvproxy | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade ignitionUpgrade butaneUpgrade cri-o | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade podman-gvproxyUpgrade osbuild-composer-core-debuginfoUpgrade git-lfs-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade osbuild-composer-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade golangUpgrade container-selinuxUpgrade git-lfsUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade weldr-clientUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade golang-srcUpgrade python3-osbuildUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade libslirpUpgrade golang-docsUpgrade go-toolsetUpgrade aardvark-dnsUpgrade buildahUpgrade podman-testsUpgrade weldr-client-tests-debuginfoUpgrade podman-dockerUpgrade weldr-client-debuginfoUpgrade osbuild-composer-workerUpgrade butane-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-luks2Upgrade podman-debugsourceUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade butane-debuginfoUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade buildah-testsUpgrade golang-testsUpgrade osbuild-composer-tests-debuginfoUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade crunUpgrade conmon-debugsourceUpgrade osbuild-lvm2Upgrade git-lfs-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade butaneUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade delveUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade osbuild-composer-dnf-jsonUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade skopeoUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade golang-miscUpgrade osbuild-ostreeUpgrade criu-libsUpgrade udicaUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceNo solution existsUpgrade cockpit-composerUpgrade conmonUpgrade criuUpgrade osbuild-composer-debugsourceUpgrade runcUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade podman-debuginfoUpgrade weldr-client-debugsourceUpgrade podman-pluginsUpgrade osbuildUpgrade netavarkUpgrade delve-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade toolbox | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade git-lfsUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-client-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade weldr-client-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade criuUpgrade criu-develUpgrade weldr-clientUpgrade criu-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.17Upgrade go1.17-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-srcUpgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub