REDHAT-BUG-2310529: Medium severity Google Go vulnerability
Published Sep 6, 2024
·Updated
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
Affected Software
1 affected component
Google Go
Event History
Sep 6, 2024
Data Sourced
via Red Hat·09:20 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2310529?
The severity of REDHAT-BUG-2310529 is considered high due to potential stack exhaustion leading to panic.
2
How do I fix REDHAT-BUG-2310529?
To fix REDHAT-BUG-2310529, apply the latest patches provided in the Red Hat errata related to this bug.
3
What versions are affected by REDHAT-BUG-2310529?
Versions of software that use deeply nested expressions with build tags are affected by REDHAT-BUG-2310529.
4
What impact does REDHAT-BUG-2310529 have on my system?
The impact of REDHAT-BUG-2310529 may cause applications to crash due to stack exhaustion.
5
Is there a workaround for REDHAT-BUG-2310529 until a fix is available?
There is no official workaround for REDHAT-BUG-2310529, but it is advisable to avoid using deeply nested expressions with build tags.