A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.

CPENameOperatorVersion
golanglt1.17.13
golangge1.18.0
golanglt1.18.5

Name	Operator	Version
golang	lt	1.17.13
golang	ge	1.18.0
golang	lt	1.18.5

References

go.dev/cl/417774

go.dev/issue/53871

go.googlesource.com/go/+/055113ef364337607e3e72ed7d48df67fde6fc66

groups.google.com/g/golang-announce/c/YqYYG87xB10

pkg.go.dev/vuln/GO-2022-0537

nessus 62

cve 1

ubuntucve 1

veracode 1

redhatcve 1

osv 15

rocky 3

cbl_mariner 2

oraclelinux 10

freebsd 1

openvas 15

fedora 1

alpinelinux 1

redhat 33

almalinux 8

ibm 24

mageia 1

prion 1

cvelist 1

nvd 1

debiancve 1

altlinux 1

suse 2

photon 7

amazon 2

ubuntu 2

gentoo 1

nessus

RHEL 9 : Image Builder (RHSA-2022:7950)

2022-11-16 00:00:00

AlmaLinux 8 : Image Builder (ALSA-2022:7548)

2022-11-12 00:00:00

Rocky Linux 8 : Image Builder (RLSA-2022:7548)

2023-11-06 00:00:00

cve

CVE-2022-32189

2022-08-10 20:15:47

ubuntucve

CVE-2022-32189

2022-08-10 00:00:00

veracode

Denial Of Service (DoS)

2022-08-02 18:52:07

redhatcve

CVE-2022-32189

2022-08-02 10:13:39

osv

Low: Image Builder security, bug fix, and enhancement update

2022-11-08 06:22:29

Low: Image Builder security, bug fix, and enhancement update

2022-11-08 00:00:00

Low: Image Builder security, bug fix, and enhancement update

2022-11-15 00:00:00

rocky

Image Builder security, bug fix, and enhancement update

2022-11-15 06:11:56

Image Builder security, bug fix, and enhancement update

2022-11-08 06:22:29

git-lfs security and bug fix update

2022-10-25 07:32:51

cbl_mariner

CVE-2022-32189 affecting package golang for versions less than 1.18.5-1

2022-09-16 06:05:39

CVE-2022-32189 affecting package golang 1.18.3-1

2022-09-17 05:56:44

oraclelinux

golang security update

2022-09-06 00:00:00

Image Builder security, bug fix, and enhancement update

2022-11-22 00:00:00

golang security update

2022-09-07 00:00:00

freebsd

go -- decoding big.Float and big.Rat can panic

2022-07-14 00:00:00

openvas

Fedora: Security Advisory for golang (FEDORA-2022-1f829990f0)

2022-08-13 00:00:00

Mageia: Security Advisory (MGASA-2022-0283)

2022-08-15 00:00:00

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2731)

2022-11-14 00:00:00

fedora

[SECURITY] Fedora 36 Update: golang-1.18.5-1.fc36

2022-08-12 01:39:18

alpinelinux

CVE-2022-32189

2022-08-10 20:15:47

redhat

(RHSA-2022:7950) Low: Image Builder security, bug fix, and enhancement update

2022-11-15 06:11:56

(RHSA-2022:7548) Low: Image Builder security, bug fix, and enhancement update

2022-11-08 06:22:29

(RHSA-2022:8534) Low: OpenShift Container Platform 4.11.16 security update

2022-11-24 04:05:04

almalinux

Low: Image Builder security, bug fix, and enhancement update

2022-11-15 00:00:00

Low: Image Builder security, bug fix, and enhancement update

2022-11-08 00:00:00

Moderate: butane security, bug fix, and enhancement update

2023-05-09 00:00:00

ibm

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to denial of service due to [CVE-2022-32189]

2023-01-27 10:13:16

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-32189)

2023-02-01 16:03:17

Security Bulletin: IBM Storage Ceph is vulnerable to an HTTP request/response smuggling vulnerablity in Golang Go

2023-11-01 19:46:14

mageia

Updated golang packages fix security vulnerability

2022-08-13 05:32:35

prion

Denial of service

2022-08-10 20:15:00

cvelist

CVE-2022-32189 Panic when decoding Float and Rat types in math/big

2022-08-09 20:17:59

nvd

CVE-2022-32189

2022-08-10 20:15:47

debiancve

CVE-2022-32189

2022-08-10 20:15:47

altlinux

Security fix for the ALT Linux 10 package golang version 1.18.5-alt1

2022-08-02 00:00:00

suse

Security update for go1.18 (important)

2022-08-04 00:00:00

Security update for go1.17 (important)

2022-08-04 00:00:00

photon

Important Photon OS Security Update - PHSA-2022-0242

2022-09-07 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0242

2022-09-07 00:00:00

Critical Photon OS Security Update - PHSA-2022-0512

2022-09-06 00:00:00

amazon

Important: golang

2023-04-13 19:01:00

Important: golang

2022-09-15 04:46:00

ubuntu

Go vulnerabilities

2024-01-09 00:00:00

Go vulnerabilities

2023-04-25 00:00:00

gentoo

Go: Multiple Vulnerabilities

2022-08-04 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

57.2%

JSON

Related for OSV:BIT-GOLANG-2022-32189