Unscored DLA-2985-1 3 CVEs

golang-1.7 - security update

Published Apr 28, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	golang-1.7	1.7.4-2+deb9u5

Vulnerabilities 3

Unscored —

CVE-2022-23772

Uncontrolled memory consumption in math/big

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-23806

Incorrect computation for some invalid field elements in crypto/elliptic

Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-24921

Stack exhaustion when compiling deeply nested expressions in regexp

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Mar 5, 2022