Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "golang-1.13-go-dbgsym": "1.13.8-1ubuntu1~16.04.3+esm3", "golang-1.13-go": "1.13.8-1ubuntu1~16.04.3+esm3", "golang-1.13-doc": "1.13.8-1ubuntu1~16.04.3+esm3", "golang-1.13-src": "1.13.8-1ubuntu1~16.04.3+esm3", "golang-1.13": "1.13.8-1ubuntu1~16.04.3+esm3" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "golang-1.13-go-dbgsym": "1.13.8-1ubuntu1~18.04.4+esm1", "golang-1.13-go": "1.13.8-1ubuntu1~18.04.4+esm1", "golang-1.13-doc": "1.13.8-1ubuntu1~18.04.4+esm1", "golang-1.13-src": "1.13.8-1ubuntu1~18.04.4+esm1", "golang-1.13": "1.13.8-1ubuntu1~18.04.4+esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "golang-1.16": "1.16.2-0ubuntu1~18.04.2+esm1", "golang-1.16-doc": "1.16.2-0ubuntu1~18.04.2+esm1", "golang-1.16-go": "1.16.2-0ubuntu1~18.04.2+esm1", "golang-1.16-go-dbgsym": "1.16.2-0ubuntu1~18.04.2+esm1", "golang-1.16-src": "1.16.2-0ubuntu1~18.04.2+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.13-go-dbgsym": "1.13.8-1ubuntu1.2", "golang-1.13-go": "1.13.8-1ubuntu1.2", "golang-1.13-doc": "1.13.8-1ubuntu1.2", "golang-1.13-src": "1.13.8-1ubuntu1.2", "golang-1.13": "1.13.8-1ubuntu1.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.16": "1.16.2-0ubuntu1~20.04.1", "golang-1.16-doc": "1.16.2-0ubuntu1~20.04.1", "golang-1.16-go": "1.16.2-0ubuntu1~20.04.1", "golang-1.16-go-dbgsym": "1.16.2-0ubuntu1~20.04.1", "golang-1.16-src": "1.16.2-0ubuntu1~20.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1~20.04.2", "golang-1.18": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-doc": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-go": "1.18.1-1ubuntu1~20.04.2", "golang-1.18-src": "1.18.1-1ubuntu1~20.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.13-go-dbgsym": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-go": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-doc": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-src": "1.13.8-1ubuntu2.22.04.2", "golang-1.13": "1.13.8-1ubuntu2.22.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1.1", "golang-1.18": "1.18.1-1ubuntu1.1", "golang-1.18-doc": "1.18.1-1ubuntu1.1", "golang-1.18-go": "1.18.1-1ubuntu1.1", "golang-1.18-src": "1.18.1-1ubuntu1.1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "golang-1.13-go-dbgsym": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-go": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-doc": "1.13.8-1ubuntu2.22.04.2", "golang-1.13-src": "1.13.8-1ubuntu2.22.04.2", "golang-1.13": "1.13.8-1ubuntu2.22.04.2" } ] }