Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade buildahUpgrade criuUpgrade runcUpgrade golangUpgrade cockpit-podmanUpgrade golang-raceUpgrade osbuild-composerUpgrade netavarkUpgrade toolboxUpgrade fuse-overlayfsUpgrade skopeoUpgrade podmanUpgrade aardvark-dnsUpgrade podman-remoteUpgrade golang-binUpgrade buildah-testsUpgrade golang-testsUpgrade golang-miscUpgrade podman-catatonitUpgrade grafana-selinuxUpgrade udicaUpgrade podman-dockerUpgrade podman-testsUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade critUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade osbuild-composer-coreUpgrade git-lfsUpgrade container-selinuxUpgrade podman-pluginsUpgrade python3-criuUpgrade libslirpUpgrade containers-commonUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade criu-develUpgrade libslirp-develUpgrade criu-libsUpgrade golang-srcUpgrade grafana-pcpUpgrade osbuild-composer-workerUpgrade go-toolsetUpgrade delveUpgrade skopeo-testsUpgrade conmon | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade amazon-cloudwatch-agentUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux | — | Upgrade golang | Apr 18, 2025 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-srcUpgrade amazon-cloudwatch-agent | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 11, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 11, 2024 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade libslirpUpgrade containers-commonUpgrade git-lfsUpgrade cockpit-podmanUpgrade python3-criuUpgrade critUpgrade podman-pluginsUpgrade golang-docsUpgrade osbuild-composerUpgrade criu-develUpgrade slirp4netnsUpgrade osbuild-composer-workerUpgrade podman-gvproxyUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade skopeo-testsUpgrade go-toolsetUpgrade criu-libsUpgrade delveUpgrade grafana-pcpUpgrade grafanaUpgrade skopeoUpgrade netavarkUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade podman-catatonitUpgrade golang-srcUpgrade podman-remoteUpgrade golang-testsUpgrade python3-podmanUpgrade buildahUpgrade runcUpgrade podman-dockerUpgrade golangUpgrade podmanUpgrade osbuild-composer-coreUpgrade grafana-selinuxUpgrade udicaUpgrade fuse-overlayfsUpgrade criuUpgrade conmonUpgrade golang-raceUpgrade golang-binUpgrade buildah-testsUpgrade golang-miscUpgrade aardvark-dns | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podmanUpgrade containernetworking-plugins | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade grafana-pcpUpgrade git-lfs-debugsourceUpgrade criu-libsUpgrade git-lfsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade python3-podmanUpgrade osbuild-composer-coreUpgrade osbuild-composer-core-debuginfoUpgrade git-lfs-debuginfoUpgrade skopeo-testsUpgrade conmonUpgrade golang-srcUpgrade osbuild-composer-dnf-jsonUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade delveUpgrade golang-miscUpgrade osbuild-composer-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade criu-develUpgrade libslirpUpgrade osbuild-composer-debuginfoUpgrade golangUpgrade go-toolsetUpgrade golang-raceUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-debugsourceNo solution existsUpgrade runc-debugsourceUpgrade podman-dockerUpgrade toolbox-testsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade golang-testsUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-gvproxyUpgrade podmanUpgrade delve-debugsourceUpgrade golang-docsUpgrade grafana-debuginfoUpgrade toolboxUpgrade udicaUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade runcUpgrade grafana-debugsourceUpgrade buildahUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade netavarkUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade criuUpgrade golang-binUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-workerUpgrade grafana-selinuxUpgrade buildah-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-debugsourceUpgrade buildah-testsUpgrade python3-criuUpgrade podman-debuginfoUpgrade crun | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade git-lfs-debugsourceUpgrade delve-debuginfoUpgrade golangUpgrade netavarkUpgrade buildahUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade skopeoUpgrade osbuild-composer-coreUpgrade grafana-pcp-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade golang-binUpgrade containernetworking-pluginsUpgrade grafana-pcp-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade grafana-selinuxUpgrade toolboxUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade podmanUpgrade grafana-debuginfoUpgrade aardvark-dnsUpgrade conmonUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade runcUpgrade grafana-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade osbuild-composer-debuginfoUpgrade osbuild-composerUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade criu-develUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade git-lfsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade grafana-pcpUpgrade grafanaUpgrade crunUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-debugsourceUpgrade delveUpgrade critUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-tests | Oct 2, 2024 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.24-client-commonUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.28-apiserverUpgrade go1.21-opensslUpgrade go1.23-opensslUpgrade kubernetes1.24-kubeletUpgrade go1.23-docUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.26-proxyUpgrade go1.22-openssl-docUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.27-proxyUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.28-clientUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-proxyUpgrade trivyUpgrade go1.23-raceUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-controller-managerUpgrade go1.23-openssl-docUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.26-client-commonUpgrade go1.23-openssl-raceUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.24-kubelet-commonUpgrade go1.21-openssl-raceUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-controller-managerUpgrade go1.23Upgrade kubernetes1.27-clientUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.25-proxyUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.24-controller-managerUpgrade go1.22-docUpgrade go1.22Upgrade go1.21-openssl-docUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-clientUpgrade kubernetes1.24-schedulerUpgrade go1.22-raceUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.25-client-fish-completionUpgrade go1.22-openssl-raceUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.28-client-fish-completionUpgrade go1.22-opensslUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-clientUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.28-proxyUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.28-scheduler | Dec 5, 2025 | Dec 18, 2024 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-srcUpgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.17-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.18 | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub