REDHAT-BUG-2310528: High severity go vulnerability
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2310528?
The severity of REDHAT-BUG-2310528 is considered to be critical due to the potential for stack exhaustion leading to application crashes.
How do I fix REDHAT-BUG-2310528?
You can fix REDHAT-BUG-2310528 by applying the latest patches provided by Red Hat for your affected software.
What causes REDHAT-BUG-2310528?
REDHAT-BUG-2310528 is caused by calling Decoder.Decode on messages with deeply nested structures, which can lead to stack exhaustion.
Which versions are affected by REDHAT-BUG-2310528?
The specific versions affected by REDHAT-BUG-2310528 are detailed in the Red Hat advisories and release notes.
Is there a workaround for REDHAT-BUG-2310528?
A temporary workaround for REDHAT-BUG-2310528 is to limit the depth of nested structures in the messages being processed.