Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1~20.04.2", "golang-1.18": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-doc": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-go": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-src": "1.18.1-1ubuntu1~20.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1.1", "golang-1.18": "1.18.1-1ubuntu1.1", "golang-1.18-doc": "1.18.1-1ubuntu1.1", "golang-1.18-go": "1.18.1-1ubuntu1.1", "golang-1.18-src": "1.18.1-1ubuntu1.1" } ] }