A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade toolboxUpgrade netavarkUpgrade aardvark-dnsUpgrade udicaUpgrade podman-pluginsUpgrade skopeoUpgrade toolbox-testsUpgrade runcUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-remoteUpgrade crunUpgrade butaneUpgrade podmanUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade criuUpgrade buildahUpgrade cockpit-podmanUpgrade python3-podmanUpgrade skopeo-testsUpgrade weldr-clientUpgrade slirp4netnsUpgrade conmonUpgrade container-selinuxUpgrade criu-libsUpgrade libslirp-develUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade libslirpUpgrade buildah-testsUpgrade git-lfsUpgrade podman-gvproxyUpgrade podman-tests | Oct 31, 2022 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade golangUpgrade golang-raceUpgrade golang-sharedUpgrade golang-miscUpgrade golang-src | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-tests | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade containers-commonUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade osbuild-ostreeUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade criu-develUpgrade osbuild-composer-dnf-jsonUpgrade weldr-client-tests-debuginfoUpgrade skopeo-testsUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade cockpit-composerUpgrade criu-libsUpgrade osbuild-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-lvm2Upgrade toolboxUpgrade osbuild-composer-debugsourceUpgrade conmon-debugsourceUpgrade criuUpgrade golang-binUpgrade crun-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade skopeoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade weldr-client-debugsourceUpgrade butaneUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade butane-debuginfoUpgrade buildah-tests-debuginfoUpgrade delveUpgrade netavarkUpgrade conmonUpgrade libslirpUpgrade podman-testsUpgrade git-lfs-debugsourceUpgrade criu-debuginfoUpgrade crunUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade butane-debugsourceUpgrade python3-criuUpgrade git-lfsUpgrade osbuild-composer-debuginfoUpgrade container-selinuxUpgrade weldr-clientUpgrade runc-debugsourceUpgrade osbuild-composer-workerUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuildUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade osbuild-luks2Upgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade conmon-debuginfoUpgrade python3-osbuildUpgrade critUpgrade buildah-debuginfoUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade cockpit-podmanUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade buildahUpgrade toolbox-testsUpgrade slirp4netnsUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade osbuild-composerUpgrade golang-docsUpgrade golangUpgrade delve-debuginfoUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade weldr-client-debuginfoUpgrade udicaUpgrade go-toolsetUpgrade podman-gvproxy | Oct 26, 2022 | Aug 10, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Aug 2, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 15, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade python3-osbuildUpgrade podman-testsUpgrade conmonUpgrade osbuild-composer-coreUpgrade containernetworking-pluginsUpgrade golang-binUpgrade cockpit-podmanUpgrade buildahUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade golangUpgrade criuUpgrade golang-testsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade netavarkUpgrade osbuild-composerUpgrade udicaUpgrade podman-catatonitUpgrade critUpgrade skopeoUpgrade golang-raceUpgrade podmanUpgrade golang-srcUpgrade golang-miscUpgrade python3-podmanUpgrade runcUpgrade podman-remoteUpgrade osbuildUpgrade osbuild-ostreeUpgrade criu-develUpgrade osbuild-selinuxUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade podman-gvproxyUpgrade crunUpgrade cockpit-composerUpgrade libslirpUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade go-toolsetUpgrade osbuild-composer-workerUpgrade python3-criuUpgrade osbuild-lvm2Upgrade container-selinuxUpgrade weldr-clientUpgrade slirp4netnsUpgrade libslirp-develUpgrade golang-docsUpgrade osbuild-luks2Upgrade containers-commonUpgrade git-lfsUpgrade podman-plugins | Sep 7, 2022 | Aug 1, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade cri-toolsUpgrade butaneUpgrade cri-o | Nov 25, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade golang-docsUpgrade aardvark-dnsUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade podman-testsUpgrade weldr-client-debuginfoUpgrade go-toolsetUpgrade weldr-client-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade python3-osbuildUpgrade golang-srcUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade osbuild-luks2Upgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade container-selinuxUpgrade git-lfsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade golangUpgrade critUpgrade osbuild-composer-debuginfoUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade osbuild-composer-workerUpgrade cockpit-podmanUpgrade git-lfs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade podman-gvproxyUpgrade butane-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade butane-debugsourceUpgrade podman-debugsourceUpgrade weldr-clientUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade python3-podmanNo solution existsUpgrade toolboxUpgrade golang-raceUpgrade osbuildUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade golang-binUpgrade podman-catatonitUpgrade osbuild-composerUpgrade skopeo-testsUpgrade podman-pluginsUpgrade containers-commonUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-testsUpgrade udicaUpgrade conmonUpgrade podmanUpgrade criuUpgrade osbuild-composer-debugsourceUpgrade git-lfs-debugsourceUpgrade weldr-client-debugsourceUpgrade crun-debugsourceUpgrade osbuild-lvm2Upgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade criu-develUpgrade delve-debugsourceUpgrade delveUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade butaneUpgrade conmon-debugsourceUpgrade cockpit-composerUpgrade osbuild-selinuxUpgrade runcUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade osbuild-ostreeUpgrade osbuild-composer-coreUpgrade golang-miscUpgrade criu-libsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade osbuild-composer-tests-debuginfoUpgrade netavark | Oct 26, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade git-lfs-debugsourceUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-client-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade git-lfs-debuginfoUpgrade criuUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade weldr-clientUpgrade criu-debugsourceUpgrade weldr-client-debuginfoUpgrade criu-develUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade crit | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.17-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub