Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-selinuxUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-testsUpgrade golangUpgrade criuUpgrade golang-binUpgrade toolboxUpgrade buildah-testsUpgrade netavarkUpgrade podman-dockerUpgrade critUpgrade golang-miscUpgrade cockpit-podmanUpgrade golang-raceUpgrade golang-docsUpgrade runcUpgrade skopeoUpgrade podman-remoteUpgrade buildahUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade python3-podmanUpgrade podmanUpgrade aardvark-dnsUpgrade golang-testsUpgrade osbuild-composerUpgrade slirp4netnsUpgrade osbuild-composer-workerUpgrade containers-commonUpgrade go-toolsetUpgrade libslirp-develUpgrade osbuild-composer-coreUpgrade podman-gvproxyUpgrade python3-criuUpgrade libslirpUpgrade grafana-pcpUpgrade container-selinuxUpgrade skopeo-testsUpgrade crunUpgrade podman-pluginsUpgrade conmonUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade criu-develUpgrade criu-libsUpgrade golang-srcUpgrade delve | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade amazon-cloudwatch-agentUpgrade golang-docs | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux | — | Upgrade golang | Apr 18, 2025 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade golang-misc | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 11, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 11, 2024 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade delveUpgrade criu-libsUpgrade slirp4netnsUpgrade go-toolsetUpgrade container-selinuxUpgrade golang-docsUpgrade libslirp-develUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composerUpgrade skopeo-testsUpgrade crunUpgrade grafana-pcpUpgrade grafanaUpgrade podman-gvproxyUpgrade critUpgrade osbuild-composer-workerUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade python3-criuUpgrade git-lfsUpgrade libslirpUpgrade containers-commonUpgrade netavarkUpgrade golang-binUpgrade buildah-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang-testsUpgrade buildahUpgrade runcUpgrade golang-srcUpgrade python3-podmanUpgrade podman-remoteUpgrade grafana-selinuxUpgrade podman-dockerUpgrade golangUpgrade podmanUpgrade osbuild-composer-coreUpgrade udicaUpgrade aardvark-dnsUpgrade podman-testsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade criuUpgrade conmonUpgrade skopeo | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade containernetworking-plugins | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade golang-docsUpgrade buildahUpgrade podman-testsUpgrade buildah-testsUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfsUpgrade osbuild-composerUpgrade osbuild-composer-debugsourceUpgrade runc-debugsourceUpgrade skopeoNo solution existsUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade grafana-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade podmanUpgrade osbuild-composer-worker-debuginfoUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade runcUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade udicaUpgrade delve-debugsourceUpgrade crunUpgrade grafana-pcp-debuginfoUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade grafana-selinuxUpgrade podman-gvproxyUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade criuUpgrade critUpgrade golang-binUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade osbuild-composer-workerUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade osbuild-composer-tests-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade golang-raceUpgrade container-selinuxUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade golangUpgrade grafana-pcpUpgrade go-toolsetUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade git-lfsUpgrade criu-debuginfoUpgrade grafanaUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade skopeo-testsUpgrade git-lfs-debuginfoUpgrade osbuild-composer-coreUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade delveUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade golang-srcUpgrade criu-develUpgrade osbuild-composer-dnf-jsonUpgrade conmon-debuginfoUpgrade osbuild-composer-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade git-lfs-debugsource | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade runc-debuginfoUpgrade libslirpUpgrade runcUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade grafana-debugsourceUpgrade libslirp-develUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade python3-criuUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade criu-libsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade osbuild-composer-debuginfoUpgrade go-toolsetUpgrade toolbox-debuginfoUpgrade critUpgrade git-lfs-debuginfoUpgrade osbuild-composer-workerUpgrade grafanaUpgrade podman-debugsourceUpgrade crunUpgrade osbuild-composer-worker-debuginfoUpgrade grafana-pcpUpgrade toolbox-debugsourceUpgrade criuUpgrade containernetworking-pluginsUpgrade toolboxUpgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade osbuild-composer-core-debuginfoUpgrade golangUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade buildahUpgrade netavarkUpgrade skopeo-debugsourceUpgrade grafana-pcp-debugsourceUpgrade grafana-debuginfoUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade conmonUpgrade aardvark-dnsUpgrade osbuild-composer-coreUpgrade criu-libs-debuginfoUpgrade conmon-debugsourceUpgrade delve-debugsourceUpgrade golang-binUpgrade podman-catatonitUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade criu-debuginfoUpgrade buildah-debugsource | Oct 2, 2024 | Sep 6, 2024 |
| Suse | — | Upgrade go1.23-raceUpgrade kubernetes1.28-clientUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.27-proxyUpgrade go1.23-openssl-docUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.27-controller-managerUpgrade go1.21-opensslUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.27-kubelet-commonUpgrade go1.22-openssl-docUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.25-schedulerUpgrade go1.23-docUpgrade kubernetes1.24-kubeletUpgrade go1.23-opensslUpgrade kubernetes1.26-controller-managerUpgrade trivyUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.26-proxyUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.24-proxyUpgrade go1.22Upgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.28-kubeletUpgrade go1.22-opensslUpgrade kubernetes1.26-clientUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.25-client-commonUpgrade go1.23-openssl-raceUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.24-schedulerUpgrade go1.22-raceUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.27-clientUpgrade go1.23Upgrade kubernetes1.25-proxyUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.28-proxyUpgrade kubernetes1.26-client-bash-completionUpgrade go1.22-openssl-raceUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-kubelet-commonUpgrade go1.21-openssl-raceUpgrade kubernetes1.25-clientUpgrade go1.21-openssl-docUpgrade go1.22-doc | Dec 5, 2025 | Dec 18, 2024 |
| Ubuntu | — | Upgrade golang-1.17Upgrade golang-1.22-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.18-srcUpgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.18-go | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub