Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade osbuild-ostreeUpgrade osbuildUpgrade osbuild-composer-workerUpgrade toolbox-testsUpgrade skopeoUpgrade toolboxUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade netavarkUpgrade runcUpgrade crunUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade podman-catatonitUpgrade podman-remoteUpgrade osbuild-lvm2Upgrade podman-pluginsUpgrade python3-criuUpgrade buildahUpgrade criuUpgrade podmanUpgrade udicaUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade osbuild-depsolve-dnfUpgrade osbuild-selinuxUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade python3-osbuildUpgrade osbuild-luks2Upgrade criu-libsUpgrade cockpit-podmanUpgrade golang-miscUpgrade containers-commonUpgrade osbuild-composer-coreUpgrade podman-dockerUpgrade python3-podmanUpgrade skopeo-testsUpgrade golangUpgrade delveUpgrade libslirp-develUpgrade criu-develUpgrade libslirpUpgrade podman-testsUpgrade golang-srcUpgrade conmonUpgrade go-toolsetUpgrade podman-gvproxyUpgrade container-selinuxUpgrade buildah-tests | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade golang-docs | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade osbuildUpgrade runcUpgrade osbuild-luks2Upgrade golang-docsUpgrade critUpgrade osbuild-composer-workerUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade crunUpgrade podman-remoteUpgrade udicaUpgrade containernetworking-pluginsUpgrade criu-develUpgrade osbuild-composerUpgrade podmanUpgrade criuUpgrade podman-pluginsUpgrade golang-testsUpgrade skopeoUpgrade container-selinuxUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade delveUpgrade podman-dockerUpgrade python3-criuUpgrade golang-binUpgrade podman-catatonitUpgrade golangUpgrade go-toolsetUpgrade osbuild-selinuxUpgrade netavarkUpgrade libslirpUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade criu-libsUpgrade python3-osbuildUpgrade golang-srcUpgrade buildah-testsUpgrade golang-miscUpgrade osbuild-ostreeUpgrade osbuild-lvm2Upgrade osbuild-depsolve-dnfUpgrade libslirp-develUpgrade conmonUpgrade containers-commonUpgrade osbuild-composer-coreUpgrade buildahUpgrade python3-podman | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade golang-testsNo solution existsUpgrade osbuild-composer-core-debuginfoUpgrade netavarkUpgrade podman-dockerUpgrade buildah-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade osbuild-luks2Upgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composerUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade osbuild-composer-tests-debuginfoUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade python3-podmanUpgrade criuUpgrade golang-miscUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-debuginfoUpgrade podmanUpgrade osbuild-depsolve-dnfUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade golang-binUpgrade python3-osbuildUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade buildahUpgrade aardvark-dnsUpgrade osbuild-composer-coreUpgrade golang-srcUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade udicaUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade critUpgrade skopeoUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade golang-docsUpgrade libslirp-develUpgrade runcUpgrade osbuildUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade libslirpUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade osbuild-selinuxUpgrade criu-libsUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade delveUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade osbuild-ostreeUpgrade osbuild-lvm2Upgrade osbuild-composer-workerUpgrade toolboxUpgrade go-toolsetUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade crunUpgrade skopeo-testsUpgrade podman-pluginsUpgrade container-selinuxUpgrade conmonUpgrade podman-catatonit-debuginfo | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade podmanUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade critUpgrade criuUpgrade criu-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade delveUpgrade crunUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade podman-debugsourceUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade go-toolsetUpgrade runc-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade containers-commonUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podman-pluginsUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade netavarkUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade toolboxUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.25-clientUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.24-clientUpgrade kubernetes1.24-controller-managerUpgrade go1.23-openssl-raceUpgrade kubernetes1.25-kubeletUpgrade go1.23-docUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.28-client-fish-completionUpgrade go1.23Upgrade kubernetes1.25-proxyUpgrade go1.22-raceUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-kubelet-commonUpgrade go1.22-docUpgrade go1.22-opensslUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.26-apiserverUpgrade go1.22-openssl-raceUpgrade go1.21-openssl-docUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-proxyUpgrade go1.21-openssl-raceUpgrade go1.22-openssl-docUpgrade kubernetes1.27-proxyUpgrade go1.23-raceUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-client-bash-completionUpgrade go1.23-openssl-docUpgrade go1.22Upgrade kubernetes1.27-clientUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.26-schedulerUpgrade trivyUpgrade kubernetes1.26-clientUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-client-commonUpgrade go1.23-opensslUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.26-proxyUpgrade go1.21-opensslUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.24-apiserver | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.18-srcUpgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub