Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade conmonUpgrade osbuild-composer-coreUpgrade criu-libsUpgrade golang-srcUpgrade osbuild-composer-workerUpgrade skopeo-testsUpgrade slirp4netnsUpgrade crunUpgrade podman-pluginsUpgrade go-toolsetUpgrade container-selinuxUpgrade podman-gvproxyUpgrade git-lfsUpgrade containers-commonUpgrade grafanaUpgrade grafana-pcpUpgrade criu-develUpgrade libslirp-develUpgrade libslirpUpgrade golang-binUpgrade golang-miscUpgrade podman-catatonitUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade udicaUpgrade criuUpgrade golangUpgrade podman-dockerUpgrade golang-raceUpgrade toolbox-testsUpgrade runcUpgrade golang-docsUpgrade podmanUpgrade buildahUpgrade netavarkUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade toolboxUpgrade podman-testsUpgrade skopeoUpgrade cockpit-podmanUpgrade podman-remoteUpgrade grafana-selinuxUpgrade critUpgrade golang-testsUpgrade python3-podman | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade golang-binUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-tests | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux | — | Upgrade golang | Apr 18, 2025 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-docsUpgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade golang-src | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 11, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2024 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 11, 2024 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade criu-libsUpgrade delveUpgrade grafana-pcpUpgrade go-toolsetUpgrade skopeo-testsUpgrade grafanaUpgrade git-lfsUpgrade libslirpUpgrade containers-commonUpgrade python3-criuUpgrade container-selinuxUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade osbuild-composer-workerUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade osbuild-composerUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade critUpgrade libslirp-develUpgrade golang-docsUpgrade netavarkUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade aardvark-dnsUpgrade golang-testsUpgrade criuUpgrade python3-podmanUpgrade podman-remoteUpgrade golang-srcUpgrade fuse-overlayfsUpgrade buildahUpgrade udicaUpgrade runcUpgrade conmonUpgrade podman-dockerUpgrade podmanUpgrade grafana-selinuxUpgrade golangUpgrade skopeoUpgrade golang-raceUpgrade golang-miscUpgrade golang-binUpgrade buildah-testsUpgrade podman-testsUpgrade podman-catatonit | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade skopeoUpgrade containernetworking-pluginsUpgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade skopeo-debuginfoUpgrade toolboxUpgrade osbuild-composer-worker-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade udicaUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade podmanUpgrade skopeo-debugsourceUpgrade grafana-pcp-debugsourceUpgrade delve-debugsourceUpgrade podman-remoteUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade grafana-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netnsUpgrade criuUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade grafana-pcp-debuginfoNo solution existsUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade runc-debugsourceUpgrade osbuild-composer-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade grafana-selinuxUpgrade skopeoUpgrade grafana-debuginfoUpgrade podman-dockerUpgrade python3-criuUpgrade podman-catatonitUpgrade osbuild-composer-workerUpgrade crunUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade critUpgrade golang-docsUpgrade grafana-pcpUpgrade grafanaUpgrade containers-commonUpgrade git-lfs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade buildah-tests-debuginfoUpgrade git-lfsUpgrade criu-libsUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade osbuild-composer-tests-debuginfoUpgrade delveUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade golangUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade osbuild-composer-debuginfoUpgrade libslirpUpgrade libslirp-develUpgrade conmonUpgrade go-toolsetUpgrade golang-raceUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade osbuild-composer-dnf-jsonUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade golang-srcUpgrade conmon-debuginfoUpgrade golang-miscUpgrade crun-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade osbuild-composer-coreUpgrade skopeo-tests | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade osbuild-composer-coreUpgrade aardvark-dnsUpgrade conmonUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade grafana-selinuxUpgrade skopeoUpgrade fuse-overlayfsUpgrade podmanUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade toolboxUpgrade grafana-debuginfoUpgrade golang-binUpgrade skopeo-debugsourceUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade buildah-testsUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade golangUpgrade netavarkUpgrade buildah-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade osbuild-composerUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade osbuild-composer-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade grafana-debugsourceUpgrade containers-commonUpgrade runcUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade libslirpUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade crunUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade grafanaUpgrade grafana-pcpUpgrade toolbox-debuginfo | Oct 2, 2024 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.25-apiserverUpgrade kubernetes1.27-clientUpgrade kubernetes1.25-proxyUpgrade go1.23Upgrade go1.22Upgrade go1.21-openssl-docUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-client-bash-completionUpgrade go1.23-openssl-raceUpgrade kubernetes1.25-client-commonUpgrade go1.21-openssl-raceUpgrade go1.22-openssl-raceUpgrade kubernetes1.26-clientUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.24-kubelet-commonUpgrade go1.22-docUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.28-kubeletUpgrade go1.22-opensslUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.25-client-fish-completionUpgrade go1.22-raceUpgrade kubernetes1.28-proxyUpgrade kubernetes1.25-clientUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-controller-managerUpgrade trivyUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.24-client-fish-completionUpgrade go1.22-openssl-docUpgrade go1.21-opensslUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.24-client-commonUpgrade go1.23-docUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.24-kubeletUpgrade go1.23-opensslUpgrade kubernetes1.26-proxyUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.27-proxyUpgrade go1.23-raceUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-apiserverUpgrade go1.23-openssl-docUpgrade kubernetes1.28-client-common | Dec 5, 2025 | Dec 18, 2024 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.18Upgrade golang-1.17Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.17-goUpgrade golang-1.22-srcUpgrade golang-1.18-srcUpgrade golang-1.22Upgrade golang-1.18-go | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub