A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade skopeoUpgrade buildahUpgrade aardvark-dnsUpgrade criuUpgrade podman-pluginsUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade crunUpgrade toolboxUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade critUpgrade runcUpgrade podman-remoteUpgrade podman-catatonitUpgrade netavarkUpgrade python3-criuUpgrade butaneUpgrade git-lfsUpgrade podman-gvproxyUpgrade podman-testsUpgrade containers-commonUpgrade criu-libsUpgrade libslirp-develUpgrade conmonUpgrade criu-develUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade python3-podmanUpgrade weldr-clientUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade libslirpUpgrade buildah-tests | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-sharedUpgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-docs | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade osbuild-selinuxUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade cockpit-composerUpgrade conmonUpgrade podman-testsUpgrade osbuild-composer-dnf-jsonUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade criu-libsUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-develUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade skopeoUpgrade butane-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade libslirpUpgrade containers-commonUpgrade golang-testsUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade weldr-client-debugsourceUpgrade crunUpgrade osbuild-lvm2Upgrade podmanUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade criuUpgrade butaneUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade golang-binUpgrade netavarkUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade podman-pluginsUpgrade osbuild-ostreeUpgrade podman-remoteUpgrade git-lfsUpgrade criu-libs-debuginfoUpgrade critUpgrade python3-osbuildUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debuginfoUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade container-selinuxUpgrade golang-srcUpgrade go-toolsetUpgrade osbuild-composerUpgrade golang-docsUpgrade golangUpgrade delve-debuginfoUpgrade crun-debuginfoUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuildUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade weldr-client-debuginfoUpgrade udicaUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade buildahUpgrade osbuild-composer-tests-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade osbuild-luks2Upgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade butane-debugsourceUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade weldr-clientUpgrade osbuild-composer-debuginfo | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade skopeoUpgrade golang-raceUpgrade python3-podmanUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade runcUpgrade buildahUpgrade critUpgrade containernetworking-pluginsUpgrade criuUpgrade podman-remoteUpgrade python3-osbuildUpgrade conmonUpgrade udicaUpgrade golang-binUpgrade golang-testsUpgrade netavarkUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade podman-testsUpgrade golang-miscUpgrade podman-catatonitUpgrade golangUpgrade podmanUpgrade golang-srcUpgrade podman-dockerUpgrade osbuildUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containers-commonUpgrade cockpit-composerUpgrade podman-pluginsUpgrade slirp4netnsUpgrade weldr-clientUpgrade podman-gvproxyUpgrade python3-criuUpgrade osbuild-lvm2Upgrade osbuild-luks2Upgrade crunUpgrade container-selinuxUpgrade golang-docsUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade osbuild-ostreeUpgrade criu-develUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade osbuild-selinuxUpgrade libslirpUpgrade git-lfsUpgrade skopeo-tests | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade cri-oUpgrade butaneUpgrade cri-toolsUpgrade ignition | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade python3-osbuildUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade weldr-client-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade golangUpgrade critUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-debuginfoUpgrade osbuild-luks2Upgrade criu-debugsourceUpgrade container-selinuxUpgrade podman-debugsourceUpgrade podman-testsUpgrade buildahUpgrade golang-docsUpgrade weldr-client-tests-debuginfoUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade git-lfsUpgrade weldr-clientUpgrade osbuild-composer-core-debuginfoUpgrade podman-gvproxyUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade git-lfs-debuginfoUpgrade butane-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade golang-srcUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade butane-debugsourceUpgrade containernetworking-pluginsUpgrade osbuild-composer-tests-debuginfoUpgrade golang-raceUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade cockpit-composerUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runcUpgrade delveUpgrade criu-develUpgrade butaneUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade osbuild-lvm2Upgrade podman-remote-debuginfoUpgrade toolboxUpgrade delve-debuginfoUpgrade osbuildUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade golang-miscUpgrade podman-remoteUpgrade containers-commonUpgrade osbuild-composer-coreUpgrade osbuild-selinuxUpgrade buildah-debugsourceUpgrade podmanUpgrade osbuild-composer-debugsourceUpgrade conmon-debugsourceUpgrade conmonUpgrade crun-debugsourceUpgrade criuNo solution existsUpgrade golang-testsUpgrade udicaUpgrade osbuild-composerUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade weldr-client-debugsourceUpgrade git-lfs-debugsourceUpgrade python3-podmanUpgrade toolbox-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade osbuild-ostreeUpgrade netavarkUpgrade crunUpgrade criu-libs-debuginfoUpgrade delve-debugsource | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade criu-develUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade weldr-client-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade weldr-clientUpgrade criuUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade weldr-client-debugsourceUpgrade libslirp-develUpgrade libslirp | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.18Upgrade go1.17-docUpgrade go1.17Upgrade go1.18-openssl | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub