A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade conmonUpgrade libslirp-develUpgrade criu-libsUpgrade git-lfsUpgrade container-selinuxUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade criu-develUpgrade libslirpUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade weldr-clientUpgrade containers-commonUpgrade fuse-overlayfsUpgrade critUpgrade podmanUpgrade toolboxUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade butaneUpgrade podman-catatonitUpgrade netavarkUpgrade aardvark-dnsUpgrade buildahUpgrade podman-pluginsUpgrade criuUpgrade udicaUpgrade skopeoUpgrade crunUpgrade runcUpgrade python3-criuUpgrade toolbox-testsUpgrade podman-remote | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-docsUpgrade golang-sharedUpgrade golang-bin | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade skopeoUpgrade golang-testsUpgrade git-lfs-debugsourceUpgrade buildah-debugsourceUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade libslirpUpgrade podman-catatonitUpgrade libslirp-develUpgrade osbuild-ostreeUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade osbuild-composer-dnf-jsonUpgrade toolbox-debugsourceUpgrade butane-debuginfoUpgrade delveUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-lvm2Upgrade podmanUpgrade netavarkUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade python3-podmanUpgrade delve-debugsourceUpgrade weldr-client-debugsourceUpgrade cockpit-composerUpgrade conmonUpgrade osbuild-selinuxUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade criuUpgrade criu-libsUpgrade butaneUpgrade skopeo-testsUpgrade golang-raceUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade crun-debugsourceUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade butane-debugsourceUpgrade delve-debuginfoUpgrade podman-dockerUpgrade cockpit-podmanUpgrade python3-criuUpgrade osbuild-composer-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade osbuild-composerUpgrade golang-docsUpgrade golangUpgrade weldr-client-debuginfoUpgrade udicaUpgrade crun-debuginfoUpgrade git-lfsUpgrade slirp4netnsUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade buildahUpgrade osbuild-luks2Upgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuildUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade osbuild-composer-debuginfoUpgrade container-selinuxUpgrade python3-osbuildUpgrade critUpgrade buildah-debuginfoUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade weldr-clientUpgrade aardvark-dns | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golangUpgrade udicaUpgrade golang-srcUpgrade osbuildUpgrade podmanUpgrade podman-dockerUpgrade buildahUpgrade golang-miscUpgrade podman-testsUpgrade golang-testsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade golang-binUpgrade skopeoUpgrade python3-osbuildUpgrade criuUpgrade podman-remoteUpgrade conmonUpgrade netavarkUpgrade osbuild-composer-coreUpgrade runcUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade cockpit-podmanUpgrade python3-podmanUpgrade podman-catatonitUpgrade osbuild-composerUpgrade critUpgrade container-selinuxUpgrade crunUpgrade slirp4netnsUpgrade osbuild-ostreeUpgrade libslirp-develUpgrade weldr-clientUpgrade containers-commonUpgrade osbuild-lvm2Upgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade criu-libsUpgrade skopeo-testsUpgrade libslirpUpgrade criu-develUpgrade cockpit-composerUpgrade podman-gvproxyUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade python3-criuUpgrade osbuild-selinuxUpgrade git-lfsUpgrade podman-pluginsUpgrade osbuild-luks2Upgrade golang-docs | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade cri-oUpgrade butaneUpgrade ignitionUpgrade cri-tools | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade golang-miscUpgrade osbuild-composer-coreUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade git-lfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade skopeo-testsUpgrade osbuild-ostreeUpgrade buildah-debugsourceUpgrade osbuild-selinuxUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade osbuild-composerUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade criuUpgrade osbuild-composer-debugsourceNo solution existsUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade cockpit-composerUpgrade podman-remote-debuginfoUpgrade butaneUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade osbuild-lvm2Upgrade weldr-client-debugsourceUpgrade containers-commonUpgrade criu-libsUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade python3-podmanUpgrade udicaUpgrade podmanUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade toolboxUpgrade osbuildUpgrade podman-pluginsUpgrade netavarkUpgrade osbuild-composer-dnf-jsonUpgrade weldr-clientUpgrade golangUpgrade osbuild-composer-workerUpgrade osbuild-composer-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade golang-srcUpgrade critUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade libslirpUpgrade weldr-client-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade podman-testsUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade buildahUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade butane-debugsourceUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-debugsourceUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-gvproxyUpgrade butane-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-luks2Upgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-osbuildUpgrade slirp4netns | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade weldr-client-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade git-lfsUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-client-debuginfoUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade criu-libs-debuginfoUpgrade critUpgrade weldr-clientUpgrade libslirp-debugsourceUpgrade criu-develUpgrade python3-criuUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub