CVE-2022-24921

golang: regexp: stack exhaustion via a deeply nested expression

Published Mar 5, 2022 CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Description
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2985-1 golang-1.7 security update
Debian DLA Debian DLA DLA-2986-1 golang-1.8 security update
Debian DLA Debian DLA DLA-3395-1 golang-1.11 security update
EUVD EUVD EUVD-2022-29676 regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
History

No history.