A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade containers-commonUpgrade criu-libsUpgrade podman-testsUpgrade libslirp-develUpgrade conmonUpgrade slirp4netnsUpgrade criu-develUpgrade libslirpUpgrade weldr-clientUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade python3-podmanUpgrade podman-dockerUpgrade butaneUpgrade criuUpgrade podman-catatonitUpgrade netavarkUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade skopeoUpgrade python3-criuUpgrade crunUpgrade runcUpgrade udicaUpgrade buildahUpgrade podman-remoteUpgrade podman-pluginsUpgrade critUpgrade fuse-overlayfsUpgrade toolboxUpgrade podmanUpgrade containernetworking-plugins | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade golang-misc | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade osbuild-composer-debuginfoUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade python3-osbuildUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade python3-criuUpgrade slirp4netnsUpgrade git-lfs-debuginfoUpgrade go-toolsetUpgrade golang-srcUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade osbuildUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade delve-debuginfoUpgrade podman-debuginfoUpgrade golangUpgrade golang-docsUpgrade osbuild-composerUpgrade skopeo-debugsourceUpgrade udicaUpgrade podman-remoteUpgrade weldr-client-debuginfoUpgrade weldr-clientUpgrade cockpit-podmanUpgrade podman-dockerUpgrade aardvark-dnsUpgrade butane-debugsourceUpgrade buildahUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade runcUpgrade skopeo-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade osbuild-composer-workerUpgrade conmon-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-luks2Upgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade criu-develUpgrade weldr-client-debugsourceUpgrade golang-testsUpgrade podman-catatonitUpgrade osbuild-lvm2Upgrade oci-seccomp-bpf-hookUpgrade delveUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade netavarkUpgrade osbuild-ostreeUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade libslirpUpgrade containers-commonUpgrade butane-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade butaneUpgrade toolboxUpgrade golang-binUpgrade criuUpgrade conmon-debugsourceUpgrade podman-testsUpgrade conmonUpgrade cockpit-composerUpgrade python3-podmanUpgrade osbuild-selinuxUpgrade delve-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade golang-miscUpgrade skopeo-testsUpgrade osbuild-composer-core-debuginfoUpgrade skopeoUpgrade git-lfs-debugsourceUpgrade buildah-debugsourceUpgrade crunUpgrade crun-debugsourceUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsource | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade container-selinuxUpgrade podman-pluginsUpgrade crunUpgrade cockpit-composerUpgrade containers-commonUpgrade git-lfsUpgrade golang-docsUpgrade go-toolsetUpgrade skopeo-testsUpgrade slirp4netnsUpgrade osbuild-lvm2Upgrade delveUpgrade python3-criuUpgrade osbuild-luks2Upgrade osbuild-composer-workerUpgrade libslirpUpgrade osbuild-ostreeUpgrade criu-libsUpgrade podman-gvproxyUpgrade weldr-clientUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-selinuxUpgrade criu-develUpgrade udicaUpgrade golangUpgrade osbuildUpgrade buildah-testsUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade golang-srcUpgrade criuUpgrade osbuild-composer-coreUpgrade netavarkUpgrade buildahUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade golang-binUpgrade podman-dockerUpgrade podmanUpgrade golang-miscUpgrade golang-testsUpgrade aardvark-dnsUpgrade python3-podmanUpgrade critUpgrade runcUpgrade podman-remoteUpgrade podman-testsUpgrade conmonUpgrade skopeoUpgrade golang-raceUpgrade python3-osbuildUpgrade podman-catatonit | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade cri-oUpgrade butaneUpgrade cri-toolsUpgrade ignition | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade toolboxUpgrade skopeoUpgrade toolbox-debugsourceUpgrade python3-podmanUpgrade criu-libsUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade osbuild-composer-coreUpgrade osbuild-ostreeUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade osbuild-selinuxUpgrade runcUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-debugsourceUpgrade udicaUpgrade podmanUpgrade criuNo solution existsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-testsUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade osbuild-lvm2Upgrade podman-debuginfoUpgrade crunUpgrade weldr-client-debugsourceUpgrade criu-develUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade osbuild-composer-tests-debuginfoUpgrade skopeo-testsUpgrade golang-miscUpgrade git-lfs-debugsourceUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade butaneUpgrade podman-remote-debuginfoUpgrade cockpit-composerUpgrade netavarkUpgrade delve-debuginfoUpgrade golang-raceUpgrade osbuildUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade osbuild-composer-dnf-jsonUpgrade python3-criuUpgrade osbuild-composer-core-debuginfoUpgrade git-lfs-debuginfoUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade butane-debuginfoUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade osbuild-composer-worker-debuginfoUpgrade weldr-clientUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade git-lfsUpgrade criu-debuginfoUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-luks2Upgrade python3-osbuildUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade golang-srcUpgrade toolbox-testsUpgrade golang-docsUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade podman-testsUpgrade aardvark-dnsUpgrade weldr-client-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade butane-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade weldr-client-tests-debuginfoUpgrade osbuild-composer-workerUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade golangUpgrade osbuild-composer-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade crit | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade git-lfsUpgrade criu-debuginfoUpgrade git-lfs-debugsourceUpgrade weldr-client-debugsourceUpgrade libslirp-develUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade libslirp-debugsourceUpgrade weldr-clientUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade weldr-client-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade criuUpgrade python3-criu | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.13-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub