Important: golang

🗓️ 25 Sep 2023 00:00:00Reported by AmazonType

amazon🔗 alas.aws.amazon.com👁 22 Views

Go vulnerabilities: Macho parse panic; ForkExec FD exhaustion; Transfer-Encoding issue.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-41772,CVE-2021-41771)	22 Apr 202220:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-41724)	27 Jul 202317:38	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go and Java SE might affect IBM Spectrum Copy Data Management (CVE-2022-41717, CVE-2023-21830, CVE-2023-21835, CVE-2023-21843)	16 Mar 202318:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-24675)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	2	aarch64	golang	1.19.6-1.amzn2.0.2	golang-1.19.6-1.amzn2.0.2.aarch64.rpm
Amazon Linux	2	x86_64	golang	1.19.6-1.amzn2.0.2	golang-1.19.6-1.amzn2.0.2.x86_64.rpm
Amazon Linux	2	aarch64	golang-bin	1.19.6-1.amzn2.0.2	golang-bin-1.19.6-1.amzn2.0.2.aarch64.rpm
Amazon Linux	2	x86_64	golang-bin	1.19.6-1.amzn2.0.2	golang-bin-1.19.6-1.amzn2.0.2.x86_64.rpm
Amazon Linux	2	any	golang-docs	1.19.6-1.amzn2.0.2	golang-docs-1.19.6-1.amzn2.0.2.noarch.rpm
Amazon Linux	2	any	golang-misc	1.19.6-1.amzn2.0.2	golang-misc-1.19.6-1.amzn2.0.2.noarch.rpm
Amazon Linux	2	x86_64	golang-race	1.19.6-1.amzn2.0.2	golang-race-1.19.6-1.amzn2.0.2.x86_64.rpm
Amazon Linux	2	aarch64	golang-shared	1.19.6-1.amzn2.0.2	golang-shared-1.19.6-1.amzn2.0.2.aarch64.rpm
Amazon Linux	2	x86_64	golang-shared	1.19.6-1.amzn2.0.2	golang-shared-1.19.6-1.amzn2.0.2.x86_64.rpm
Amazon Linux	2	any	golang-src	1.19.6-1.amzn2.0.2	golang-src-1.19.6-1.amzn2.0.2.noarch.rpm

25 Sep 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.8

CVSS 3.17.8 - 9.1

EPSS0.0995

SSVC

macho parsing panic fork exec exhaustion transfer encoding issue parser stack overflow rat setstring overflow branch tag misinterpretation elliptic curve issue