Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-binUpgrade podman-remoteUpgrade python3-criuUpgrade criuUpgrade toolbox-testsUpgrade osbuild-ostreeUpgrade skopeoUpgrade podman-catatonitUpgrade osbuild-lvm2Upgrade critUpgrade osbuild-composerUpgrade aardvark-dnsUpgrade crunUpgrade osbuildUpgrade toolboxUpgrade netavarkUpgrade runcUpgrade osbuild-composer-workerUpgrade udicaUpgrade podmanUpgrade fuse-overlayfsUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade buildahUpgrade podman-pluginsUpgrade containers-commonUpgrade podman-dockerUpgrade conmonUpgrade python3-podmanUpgrade golang-miscUpgrade golangUpgrade osbuild-composer-coreUpgrade criu-develUpgrade podman-testsUpgrade go-toolsetUpgrade golang-srcUpgrade osbuild-selinuxUpgrade criu-libsUpgrade buildah-testsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade libslirpUpgrade python3-osbuildUpgrade osbuild-luks2Upgrade osbuild-depsolve-dnfUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade slirp4netnsUpgrade delveUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook | Sep 26, 2024 | Sep 6, 2024 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Sep 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang | Oct 3, 2024 | Sep 6, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade amazon-cloudwatch-agent | Feb 17, 2025 | Sep 6, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 11, 2025 | Sep 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Feb 11, 2025 | Sep 6, 2024 |
| Oracle_linux | — | Upgrade osbuild-lvm2Upgrade osbuild-depsolve-dnfUpgrade osbuild-selinuxUpgrade conmonUpgrade libslirp-develUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade fuse-overlayfsUpgrade golang-srcUpgrade python3-osbuildUpgrade osbuild-ostreeUpgrade golangUpgrade aardvark-dnsUpgrade go-toolsetUpgrade netavarkUpgrade buildahUpgrade containers-commonUpgrade libslirpUpgrade osbuild-composer-coreUpgrade buildah-testsUpgrade python3-podmanUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade criuUpgrade container-selinuxUpgrade osbuildUpgrade osbuild-luks2Upgrade runcUpgrade skopeo-testsUpgrade skopeoUpgrade golang-testsUpgrade podman-catatonitUpgrade slirp4netnsUpgrade osbuild-composer-workerUpgrade podman-testsUpgrade critUpgrade podmanUpgrade osbuild-composerUpgrade criu-develUpgrade crunUpgrade udicaUpgrade podman-remoteUpgrade cockpit-podmanUpgrade python3-criuUpgrade podman-gvproxyUpgrade golang-binUpgrade delveUpgrade podman-plugins | Oct 16, 2024 | Sep 6, 2024 |
| Redhat Openshift | — | Upgrade podman | Oct 24, 2024 | Sep 6, 2024 |
| Redhat_linux | — | Upgrade runc-debugsourceUpgrade golangUpgrade python3-osbuildUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade golang-binUpgrade golang-testsUpgrade buildahUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composerUpgrade netavarkNo solution existsUpgrade buildah-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade osbuild-luks2Upgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade osbuild-composer-tests-debuginfoUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade python3-podmanUpgrade osbuild-depsolve-dnfUpgrade delve-debugsourceUpgrade osbuild-composer-coreUpgrade osbuild-composer-core-debuginfoUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade osbuild-composer-debuginfoUpgrade podmanUpgrade conmonUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade skopeoUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade osbuild-selinuxUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade golang-docsUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade osbuildUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-lvm2Upgrade osbuild-composer-workerUpgrade go-toolsetUpgrade osbuild-ostreeUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade udicaUpgrade runc-debuginfoUpgrade podman-testsUpgrade osbuild-composer-debugsourceUpgrade delveUpgrade crunUpgrade criu-develUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-libsUpgrade podman-plugins-debuginfo | Sep 24, 2024 | Sep 6, 2024 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade golangUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade slirp4netnsUpgrade podman-testsUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade go-toolsetUpgrade delve-debuginfoUpgrade toolboxUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade containers-commonUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade libslirpUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade crunUpgrade podmanUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade critUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade delveUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade criuUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade golang-binUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade libslirp-debugsource | Oct 2, 2024 | Sep 6, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.9 | Jul 30, 2026 | Sep 6, 2024 |
| Suse | — | Upgrade kubernetes1.27-apiserverUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.28-proxyUpgrade kubernetes1.24-client-bash-completionUpgrade go1.22-docUpgrade kubernetes1.25-kubelet-commonUpgrade go1.23-raceUpgrade go1.21-opensslUpgrade kubernetes1.26-proxyUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.27-clientUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.26-clientUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.26-schedulerUpgrade go1.23-openssl-docUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.27-proxyUpgrade go1.22-openssl-docUpgrade trivyUpgrade go1.23-opensslUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.28-client-bash-completionUpgrade go1.22Upgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.28-clientUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.25-client-bash-completionUpgrade go1.23Upgrade kubernetes1.24-schedulerUpgrade kubernetes1.25-kubeletUpgrade go1.23-docUpgrade kubernetes1.26-kubelet-commonUpgrade go1.23-openssl-raceUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.25-apiserverUpgrade go1.22-opensslUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.27-client-fish-completionUpgrade go1.21-openssl-docUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.25-clientUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-clientUpgrade go1.21-openssl-raceUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.26-controller-managerUpgrade go1.22-openssl-raceUpgrade kubernetes1.27-kubeletUpgrade go1.22-raceUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.25-proxyUpgrade kubernetes1.25-controller-manager | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18Upgrade golang-1.22-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.22-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.22Upgrade golang-1.17-go | Oct 24, 2024 | Sep 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub