Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osbuild-depsolve-dnfUpgrade criu-develUpgrade libslirp-develUpgrade osbuild-luks2Upgrade python3-osbuildUpgrade delveUpgrade golang-srcUpgrade podman-dockerUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade containers-commonUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-testsUpgrade criu-libsUpgrade go-toolsetUpgrade osbuild-selinuxUpgrade buildah-testsUpgrade container-selinuxUpgrade conmonUpgrade python3-podmanUpgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade toolbox-testsUpgrade osbuild-composer-workerUpgrade fuse-overlayfsUpgrade toolboxUpgrade golang-binUpgrade skopeoUpgrade osbuild-lvm2Upgrade containernetworking-pluginsUpgrade podmanUpgrade critUpgrade osbuildUpgrade aardvark-dnsUpgrade udicaUpgrade podman-catatonitUpgrade podman-pluginsUpgrade python3-criuUpgrade netavarkUpgrade runcUpgrade osbuild-ostreeUpgrade crunUpgrade golang-testsUpgrade buildahUpgrade golang-docsUpgrade podman-remoteUpgrade osbuild-composerUpgrade criu | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade amazon-cloudwatch-agent | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade criuUpgrade python3-criuUpgrade golang-docsUpgrade osbuild-composer-workerUpgrade osbuildUpgrade podman-pluginsUpgrade container-selinuxUpgrade critUpgrade osbuild-luks2Upgrade golang-testsUpgrade runcUpgrade skopeo-testsUpgrade podman-testsUpgrade skopeoUpgrade osbuild-composerUpgrade podmanUpgrade criu-develUpgrade delveUpgrade podman-gvproxyUpgrade golang-binUpgrade podman-catatonitUpgrade slirp4netnsUpgrade podman-dockerUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade udicaUpgrade cockpit-podmanUpgrade crunUpgrade osbuild-ostreeUpgrade osbuild-depsolve-dnfUpgrade python3-osbuildUpgrade fuse-overlayfsUpgrade criu-libsUpgrade golang-srcUpgrade libslirpUpgrade osbuild-lvm2Upgrade osbuild-composer-coreUpgrade containers-commonUpgrade buildahUpgrade golang-miscUpgrade conmonUpgrade osbuild-selinuxUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade aardvark-dnsUpgrade buildah-testsUpgrade golangUpgrade go-toolsetUpgrade python3-podman | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-dockerUpgrade osbuild-composerNo solution existsUpgrade podmanUpgrade netavarkUpgrade fuse-overlayfsUpgrade osbuild-composer-core-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade golang-miscUpgrade golang-binUpgrade osbuild-composer-debuginfoUpgrade podman-gvproxyUpgrade osbuild-depsolve-dnfUpgrade osbuild-luks2Upgrade python3-osbuildUpgrade golang-testsUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade osbuild-composer-coreUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade buildahUpgrade python3-podmanUpgrade golangUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade criuUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade podman-testsUpgrade crun-debugsourceUpgrade golang-docsUpgrade delveUpgrade containernetworking-pluginsUpgrade crunUpgrade libslirp-debugsourceUpgrade osbuild-lvm2Upgrade osbuild-composer-workerUpgrade osbuild-composer-debugsourceUpgrade udicaUpgrade osbuild-ostreeUpgrade osbuild-selinuxUpgrade conmonUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade libslirpUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containers-commonUpgrade python3-criuUpgrade container-selinuxUpgrade podman-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade osbuildUpgrade libslirp-develUpgrade runcUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade crun-debuginfoUpgrade critUpgrade skopeo | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade libslirp-debuginfoUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade runcUpgrade slirp4netns-debugsourceUpgrade critUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade criu-develUpgrade podman-debuginfoUpgrade delveUpgrade podman-remote-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade conmonUpgrade go-toolsetUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade buildahUpgrade podman-testsUpgrade netavarkUpgrade crun-debuginfoUpgrade buildah-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade containers-commonUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade criu-libsUpgrade delve-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debugsource | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.25-proxyUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.28-proxyUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.27-kubeletUpgrade go1.22-openssl-raceUpgrade kubernetes1.27-client-bash-completionUpgrade go1.22-raceUpgrade go1.22-docUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.25-clientUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.24-clientUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.28-kubeletUpgrade go1.23Upgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade go1.21-openssl-docUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubelet-commonUpgrade go1.21-openssl-raceUpgrade go1.22-opensslUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-client-bash-completionUpgrade go1.23-raceUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.26-proxyUpgrade go1.22-openssl-docUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-client-bash-completionUpgrade go1.23-openssl-docUpgrade go1.22Upgrade kubernetes1.28-kubeadmUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.28-apiserverUpgrade go1.21-opensslUpgrade kubernetes1.26-client-fish-completionUpgrade go1.23-opensslUpgrade trivyUpgrade kubernetes1.26-clientUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.28-clientUpgrade kubernetes1.27-clientUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.27-proxy | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.22-goUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18-go | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub