Google Golang 资源管理错误漏洞

🗓️ 05 Mar 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Go language memory vulnerability in regular expressions can exhaust stack resources via deeply nested expressions.

Reporter	Title	Published	Views	Family All 183
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to a variety of issues due to 3rd party software	27 Sep 202417:52	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service Vulnerability in Golang Go affects IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift (CVE-2022-24921)	28 Apr 202221:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-24921).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	21 Mar 202323:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Golang language affect IBM Event Streams (CVE-2022-24921)	11 Jul 202209:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has applied security fixes for its use of Golang Go (CVE-2022-24921, CVE-2022-28327, CVE-2022-24675)	31 Jan 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-24921	8 Apr 202214:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Golang Go, libxml2, curl, expat, libgcrypt and IBM WebSphere Application Server Liberty	9 Aug 202205:46	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to stack exhaustion by Go CVE-2022-24921	12 May 202215:14	–	ibm

Source	Link
security	www.security.gentoo.org/glsa/202208-02
lists	www.lists.debian.org/debian-lts-announce/2022/04/msg00017.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00021.html
security	www.security.netapp.com/advisory/ntap-20220325-0010/
groups	www.groups.google.com/g/golang-announce/c/RP1hfrBYVuk
lists	www.lists.debian.org/debian-lts-announce/2022/04/msg00018.html
packetstormsecurity	www.packetstormsecurity.com/files/168053/Red-Hat-Security-Advisory-2022-6042-01.html
auscert	www.auscert.org.au/bulletins/ESB-2022.4747
auscert	www.auscert.org.au/bulletins/ESB-2022.3988

23 May 2026 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 25

CVSS 3.17.5

EPSS0.03255

Go language memory vulnerability regular expressions stack exhaustion resource exhaustion