Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netavarkUpgrade buildah-testsUpgrade golang-binUpgrade podmanUpgrade toolboxUpgrade cockpit-podmanUpgrade skopeoUpgrade golang-raceUpgrade podman-testsUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade criuUpgrade golang-miscUpgrade runcUpgrade golang-docsUpgrade udicaUpgrade critUpgrade grafana-selinuxUpgrade golangUpgrade aardvark-dnsUpgrade podman-remoteUpgrade podman-catatonitUpgrade osbuild-composerUpgrade toolbox-testsUpgrade buildahUpgrade python3-podmanUpgrade golang-testsUpgrade skopeo-testsUpgrade go-toolsetUpgrade criu-libsUpgrade delveUpgrade python3-criuUpgrade osbuild-composer-coreUpgrade containers-commonUpgrade golang-srcUpgrade libslirpUpgrade container-selinuxUpgrade osbuild-composer-workerUpgrade git-lfsUpgrade crunUpgrade conmonUpgrade podman-pluginsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade libslirp-develUpgrade podman-gvproxyUpgrade grafana-pcpUpgrade slirp4netns | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade amazon-cloudwatch-agent | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux | — | Upgrade golang | Apr 18, 2025 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade amazon-cloudwatch-agentUpgrade golang-shared | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 11, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 11, 2024 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade netavarkUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade udicaUpgrade criuUpgrade golang-miscUpgrade buildah-testsUpgrade skopeoUpgrade golang-raceUpgrade podman-remoteUpgrade golang-binUpgrade grafana-selinuxUpgrade runcUpgrade conmonUpgrade python3-podmanUpgrade podmanUpgrade golangUpgrade podman-dockerUpgrade golang-srcUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade osbuild-composer-coreUpgrade go-toolsetUpgrade container-selinuxUpgrade critUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade golang-docsUpgrade osbuild-composerUpgrade slirp4netnsUpgrade criu-develUpgrade crunUpgrade criu-libsUpgrade delveUpgrade grafana-pcpUpgrade grafanaUpgrade python3-criuUpgrade libslirpUpgrade git-lfsUpgrade containers-commonUpgrade cockpit-podmanUpgrade osbuild-composer-workerUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade buildahUpgrade golang-tests | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade containernetworking-pluginsUpgrade skopeoUpgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade grafana-pcpUpgrade git-lfsUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade git-lfs-debuginfoUpgrade osbuild-composer-coreUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade golang-srcUpgrade osbuild-composer-dnf-jsonUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade crun-debugsourceUpgrade delveUpgrade osbuild-composer-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade golang-miscUpgrade crun-debuginfoUpgrade go-toolsetUpgrade golangUpgrade libslirp-develUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade git-lfs-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade criu-debuginfoUpgrade podman-pluginsUpgrade osbuild-composer-debuginfoUpgrade libslirpUpgrade container-selinuxUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade libslirp-debuginfoUpgrade toolboxUpgrade podmanUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade grafana-selinuxUpgrade podman-remoteUpgrade criuUpgrade buildah-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade cockpit-podmanUpgrade golang-binUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade slirp4netns-debuginfoUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoNo solution existsUpgrade grafana-pcp-debugsourceUpgrade podman-gvproxyUpgrade golang-testsUpgrade golang-docsUpgrade grafana-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade grafana-pcp-debuginfoUpgrade python3-criuUpgrade crunUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade skopeo-debuginfoUpgrade skopeoUpgrade osbuild-composer-debugsourceUpgrade runc-debugsourceUpgrade grafana-debuginfoUpgrade osbuild-composer-workerUpgrade runc | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade buildahUpgrade aardvark-dnsUpgrade netavarkUpgrade criuUpgrade osbuild-composer-core-debuginfoUpgrade grafana-pcp-debuginfoUpgrade toolbox-testsUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade git-lfs-debugsourceUpgrade criu-libs-debuginfoUpgrade grafana-debuginfoUpgrade golangUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade grafana-pcp-debugsourceUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade podmanUpgrade osbuild-composer-coreUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade skopeoUpgrade grafana-selinuxUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade golang-binUpgrade toolbox-debugsourceUpgrade runcUpgrade libslirpUpgrade crun-debuginfoUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade grafana-debugsourceUpgrade containers-commonUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade skopeo-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade podman-pluginsUpgrade delveUpgrade git-lfsUpgrade osbuild-composer-debuginfoUpgrade osbuild-composerUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade crunUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade grafana-pcpUpgrade grafanaUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-libs | Oct 2, 2024 | Sep 6, 2024 |
| Suse | — | Upgrade go1.21-opensslUpgrade go1.22-openssl-docUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.28-clientUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-proxyUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-kubeletUpgrade go1.23-openssl-docUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.28-client-commonUpgrade go1.23-opensslUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.27-proxyUpgrade kubernetes1.28-kubelet-commonUpgrade trivyUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.26-proxyUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.27-controller-managerUpgrade go1.23-raceUpgrade go1.23-docUpgrade kubernetes1.24-kubelet-commonUpgrade go1.23-openssl-raceUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-clientUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-clientUpgrade kubernetes1.24-kubeadmUpgrade go1.22-docUpgrade go1.21-openssl-docUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-client-fish-completionUpgrade go1.22-openssl-raceUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.27-clientUpgrade kubernetes1.25-apiserverUpgrade go1.23Upgrade kubernetes1.25-proxyUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.28-proxyUpgrade go1.22-opensslUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.27-client-bash-completionUpgrade go1.22Upgrade kubernetes1.24-controller-managerUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.25-client-bash-completionUpgrade go1.22-raceUpgrade kubernetes1.25-client-commonUpgrade go1.21-openssl-raceUpgrade kubernetes1.27-kubeadm | Dec 5, 2025 | Dec 18, 2024 |
| Ubuntu | — | Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.22-goUpgrade golang-1.18-goUpgrade golang-1.17-goUpgrade golang-1.22Upgrade golang-1.18-srcUpgrade golang-1.22-src | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub