Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade osbuild-ostreeUpgrade aardvark-dnsUpgrade python3-criuUpgrade netavarkUpgrade osbuild-lvm2Upgrade podman-remoteUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade udicaUpgrade buildahUpgrade golang-docsUpgrade toolboxUpgrade critUpgrade podmanUpgrade toolbox-testsUpgrade golang-binUpgrade osbuild-composer-workerUpgrade crunUpgrade runcUpgrade golang-testsUpgrade osbuildUpgrade osbuild-composerUpgrade criuUpgrade skopeoUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade podman-gvproxyUpgrade criu-libsUpgrade container-selinuxUpgrade golangUpgrade skopeo-testsUpgrade buildah-testsUpgrade containers-commonUpgrade python3-osbuildUpgrade conmonUpgrade libslirp-develUpgrade golang-srcUpgrade osbuild-selinuxUpgrade slirp4netnsUpgrade osbuild-luks2Upgrade osbuild-composer-coreUpgrade osbuild-depsolve-dnfUpgrade delveUpgrade cockpit-podmanUpgrade criu-develUpgrade golang-miscUpgrade podman-dockerUpgrade python3-podmanUpgrade go-toolset | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-sharedUpgrade amazon-cloudwatch-agent | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-sharedUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade amazon-cloudwatch-agent | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade osbuild-composer-workerUpgrade slirp4netnsUpgrade critUpgrade podman-testsUpgrade crunUpgrade cockpit-podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade skopeo-testsUpgrade skopeoUpgrade python3-criuUpgrade golang-docsUpgrade osbuildUpgrade osbuild-luks2Upgrade podman-pluginsUpgrade runcUpgrade container-selinuxUpgrade golang-testsUpgrade criuUpgrade golang-binUpgrade podman-catatonitUpgrade delveUpgrade podman-gvproxyUpgrade udicaUpgrade podmanUpgrade osbuild-composerUpgrade criu-develUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade conmonUpgrade go-toolsetUpgrade golangUpgrade aardvark-dnsUpgrade libslirp-develUpgrade osbuild-selinuxUpgrade libslirpUpgrade osbuild-depsolve-dnfUpgrade osbuild-composer-coreUpgrade containers-commonUpgrade buildahUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade criu-libsUpgrade python3-osbuildUpgrade golang-srcUpgrade osbuild-ostreeUpgrade osbuild-lvm2Upgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade netavark | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade osbuild-lvm2Upgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade osbuildUpgrade podman-debugsourceUpgrade osbuild-ostreeUpgrade go-toolsetUpgrade toolboxUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade osbuild-composer-workerUpgrade runc-debuginfoUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade containernetworking-pluginsUpgrade criu-develUpgrade udicaUpgrade crunUpgrade python3-criuUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade osbuild-selinuxUpgrade libslirp-debuginfoUpgrade conmonUpgrade containers-commonUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-testsUpgrade podman-gvproxyUpgrade podmanUpgrade golang-binUpgrade python3-osbuildUpgrade golangUpgrade toolbox-debugsourceUpgrade osbuild-composer-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade golang-miscUpgrade osbuild-depsolve-dnfUpgrade fuse-overlayfsUpgrade golang-srcUpgrade buildahUpgrade golang-testsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade osbuild-composer-coreUpgrade podman-dockerUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-luks2Upgrade delve-debugsourceUpgrade toolbox-testsUpgrade netavarkUpgrade osbuild-composer-core-debuginfoNo solution existsUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade osbuild-composerUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade conmon-debuginfoUpgrade python3-podmanUpgrade osbuild-composer-tests-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade buildah-tests-debuginfo | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade golangUpgrade delve-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade netavarkUpgrade crun-debuginfoUpgrade buildahUpgrade buildah-debugsourceUpgrade libslirpUpgrade conmonUpgrade conmon-debuginfoUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade go-toolsetUpgrade toolboxUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade delveUpgrade containernetworking-pluginsUpgrade critUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade python3-criuUpgrade golang-binUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeoUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade criuUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsource | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade go1.23-openssl-docUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.27-proxyUpgrade kubernetes1.27-kubelet-commonUpgrade go1.22-openssl-docUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.27-clientUpgrade go1.22Upgrade go1.23-raceUpgrade go1.23-opensslUpgrade kubernetes1.25-schedulerUpgrade go1.22-opensslUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.26-controller-managerUpgrade go1.22-raceUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.27-apiserverUpgrade go1.21-openssl-raceUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.25-apiserverUpgrade go1.22-openssl-raceUpgrade go1.21-openssl-docUpgrade kubernetes1.25-clientUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.26-kubelet-commonUpgrade go1.23-openssl-raceUpgrade go1.23Upgrade kubernetes1.25-proxyUpgrade kubernetes1.27-kubeadmUpgrade go1.23-docUpgrade go1.22-docUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.28-proxyUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.24-client-commonUpgrade trivyUpgrade kubernetes1.26-clientUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.28-clientUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.26-client-commonUpgrade go1.21-opensslUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.26-proxyUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-apiserver | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.22Upgrade golang-1.22-srcUpgrade golang-1.18-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.22-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-src | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub