Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade podman-catatonitUpgrade python3-criuUpgrade criuUpgrade osbuild-composer-workerUpgrade podman-pluginsUpgrade golang-binUpgrade osbuild-lvm2Upgrade toolbox-testsUpgrade golang-docsUpgrade buildahUpgrade containernetworking-pluginsUpgrade osbuild-ostreeUpgrade osbuild-composerUpgrade skopeoUpgrade podman-remoteUpgrade udicaUpgrade aardvark-dnsUpgrade podmanUpgrade netavarkUpgrade toolboxUpgrade osbuildUpgrade crunUpgrade golang-testsUpgrade runcUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade containers-commonUpgrade podman-testsUpgrade osbuild-depsolve-dnfUpgrade osbuild-luks2Upgrade libslirp-develUpgrade skopeo-testsUpgrade podman-dockerUpgrade golang-miscUpgrade golang-srcUpgrade libslirpUpgrade python3-podmanUpgrade slirp4netnsUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade go-toolsetUpgrade container-selinuxUpgrade osbuild-selinuxUpgrade criu-develUpgrade criu-libsUpgrade buildah-testsUpgrade delveUpgrade cockpit-podmanUpgrade python3-osbuildUpgrade osbuild-composer-core | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-src | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agentUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-bin | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade containers-commonUpgrade buildahUpgrade osbuild-composer-coreUpgrade libslirpUpgrade python3-osbuildUpgrade criu-libsUpgrade golang-srcUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade osbuild-selinuxUpgrade conmonUpgrade osbuild-lvm2Upgrade osbuild-ostreeUpgrade libslirp-develUpgrade osbuild-depsolve-dnfUpgrade golang-miscUpgrade aardvark-dnsUpgrade golangUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade cockpit-podmanUpgrade runcUpgrade osbuildUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade udicaUpgrade crunUpgrade critUpgrade podman-testsUpgrade osbuild-composer-workerUpgrade slirp4netnsUpgrade podman-remoteUpgrade golang-docsUpgrade osbuild-luks2Upgrade criu-develUpgrade podman-dockerUpgrade python3-criuUpgrade podmanUpgrade osbuild-composerUpgrade criuUpgrade container-selinuxUpgrade podman-pluginsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade golang-binUpgrade delveUpgrade golang-tests | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade udicaUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade delveUpgrade osbuild-composer-debugsourceUpgrade crunUpgrade criu-develUpgrade containernetworking-pluginsUpgrade critUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-lvm2Upgrade go-toolsetUpgrade libslirpUpgrade aardvark-dnsUpgrade podman-dockerUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade golang-srcUpgrade delve-debuginfoUpgrade osbuild-composer-coreUpgrade golang-miscNo solution existsUpgrade netavarkUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-depsolve-dnfUpgrade podmanUpgrade osbuild-composer-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-luks2Upgrade delve-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade criuUpgrade osbuild-composerUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golang-binUpgrade buildahUpgrade golangUpgrade python3-osbuildUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade python3-podmanUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade golang-testsUpgrade libslirp-develUpgrade golang-docsUpgrade osbuildUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade osbuild-selinuxUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade python3-criuUpgrade podman-pluginsUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade runcUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade conmonUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade osbuild-ostreeUpgrade slirp4netns-debugsource | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade golang-binUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-remoteUpgrade criu-debugsourceUpgrade crunUpgrade runcUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade criuUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade podmanUpgrade slirp4netns-debugsourceUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade delveUpgrade delve-debuginfoUpgrade buildahUpgrade containers-commonUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade podman-pluginsUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade conmon-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade conmonUpgrade toolboxUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade libslirpUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dns | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.25-client-bash-completionUpgrade go1.22-openssl-raceUpgrade go1.22-raceUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.26-client-bash-completionUpgrade go1.23-docUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.27-kubeletUpgrade go1.21-openssl-docUpgrade go1.21-openssl-raceUpgrade kubernetes1.25-client-fish-completionUpgrade go1.22-opensslUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.24-clientUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.25-clientUpgrade go1.23-openssl-raceUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.28-proxyUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.25-proxyUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.25-controller-managerUpgrade go1.23Upgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.27-kubeadmUpgrade go1.22-docUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.24-kubeletUpgrade go1.21-opensslUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.27-clientUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.28-client-bash-completionUpgrade go1.23-openssl-docUpgrade go1.22Upgrade go1.23-opensslUpgrade trivyUpgrade kubernetes1.26-clientUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.28-client-commonUpgrade go1.23-raceUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.27-proxyUpgrade go1.22-openssl-docUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-proxyUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.26-client-common | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.22-srcUpgrade golang-1.18-goUpgrade golang-1.22Upgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro) | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub