Lucene search
HistoryAug 10, 2022 - 8:15 p.m.
CVE-2022-1962
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.2%
Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
Affected configurations
Node
golanggoRange<1.17.12
ORgolanggoRange1.18.0–1.18.4
Related
cve
cve
CVE-2022-1962
2022-08-10 20:15:26
veracode
veracode
Denial Of Service (DoS)
2022-07-22 15:36:52
prion
prion
Design/Logic Flaw
2022-08-10 20:15:00
ubuntucve
ubuntucve
CVE-2022-1962
2022-08-10 00:00:00
debiancve
debiancve
CVE-2022-1962
2022-08-10 20:15:26
osv
osv
Stack exhaustion due to deeply nested types in go/parser
2022-07-20 17:01:45
CVE-2022-1962
2022-08-10 20:15:26
BIT-golang-2022-1962
2024-03-06 11:02:59
alpinelinux
alpinelinux
CVE-2022-1962
2022-08-10 20:15:26
cbl_mariner
cbl_mariner
CVE-2022-1962 affecting package golang for versions less than 1.18.5-1
2022-09-16 06:05:39
CVE-2022-1962 affecting package golang 1.18.3-1
2022-09-17 05:56:44
ibm
ibm
Security Bulletin: Watson CP4D Data Stores is vulnerable to Golang Go to a denial of service (CVE-2022-1962)
2023-07-03 15:54:52
cvelist
cvelist
CVE-2022-1962 Stack exhaustion due to deeply nested types in go/parser
2022-08-09 20:18:18
redhatcve
redhatcve
CVE-2022-1962
2022-07-15 10:32:31
nessus
nessus
RHEL 9 : golang (Unpatched Vulnerability)
2024-06-03 00:00:00
EulerOS 2.0 SP5 : golang (EulerOS-SA-2022-2439)
2022-10-08 00:00:00
Oracle Linux 9 : go-toolset / and / golang (ELSA-2022-5799)
2022-08-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2439)
2022-10-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0262)
2022-07-18 00:00:00
openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:2671-1)
2022-08-05 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security and bug fix update
2022-08-03 00:00:00
go-toolset and golang security and bug fix update
2022-08-02 00:00:00
container-tools:3.0 security update
2022-11-15 00:00:00
redhat
redhat
(RHSA-2022:5775) Important: go-toolset:rhel8 security and bug fix update
2022-08-01 08:57:38
(RHSA-2022:7529) Moderate: container-tools:3.0 security update
2022-11-08 06:22:08
mageia
mageia
Updated golang packages fix security vulnerability
2022-07-16 22:58:20
almalinux
almalinux
Important: go-toolset:rhel8 security and bug fix update
2022-08-01 00:00:00
Moderate: container-tools:3.0 security update
2022-11-08 00:00:00
Important: go-toolset and golang security and bug fix update
2022-08-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.4-alt1
2022-07-28 00:00:00
Security fix for the ALT Linux 10 package golang version 1.17.12-alt1.p10
2022-07-29 00:00:00
rocky
rocky
container-tools:3.0 security update
2022-11-08 06:22:08
go-toolset:rhel8 security and bug fix update
2022-08-01 08:57:38
go-toolset and golang security and bug fix update
2022-08-01 15:29:25
freebsd
freebsd
go -- multiple vulnerabilities
2022-07-12 00:00:00
suse
suse
Security update for go1.18 (important)
2022-08-04 00:00:00
Security update for go1.17 (important)
2022-08-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0242
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0242
2022-09-07 00:00:00
Critical Photon OS Security Update - PHSA-2022-0512
2022-09-06 00:00:00
amazon
amazon
Important: golist
2022-09-15 04:46:00
Important: golang-github-godbus-dbus
2022-10-17 21:46:00
Important: go-rpm-macros
2022-10-17 21:46:00
fedora
fedora
[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35
2022-08-17 01:36:21
ubuntu
ubuntu
Go vulnerabilities
2024-01-09 00:00:00
Go vulnerabilities
2023-04-25 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.2%
Related for NVD:CVE-2022-1962