CVE-2022-23772
UnscoredAdvisory
Published 23 May 2022In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.028
- 86th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 827
- of 17,787 indexed, latest versions
- Container images
- 850
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Uncontrolled memory consumption in math/big
Carried by container images the latest versions of 827 of 17,787 indexed charts deploy, on 850 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+61 more | 1.16.14 | 850 |
- OSV records
- GO-2021-0317
- Also known as
- BIT-golang-2022-23772
Charts affected
827 by stars
Container images carrying it
850 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | fbc51bcf1ab0 | stdlib | 1.16.14 | 1 |
| library/ | 96d8a3f65a4f | stdlib | 1.16.14 | 1 |
| library/ | ba10ac9ba17a | stdlib | 1.16.14 | 1 |
| library/ | d7f5dd5f70e2 | stdlib | 1.16.14 | 1 |
| library/ | 7232f6388a4d | stdlib | 1.16.14 | 1 |
| library/ | 07e06f2e7ae9 | stdlib | 1.16.14 | 1 |
| library/ | 1c33370a599c | stdlib | 1.16.14 | 1 |
| library/ | 490f01279be1 | stdlib | 1.16.14 | 1 |
| library/ | 9a48ac9f196f | stdlib | 1.16.14 | 1 |
| library/ | bfc25a68e113 | stdlib | 1.16.14 | 1 |
| library/ | e22328f4d714 | stdlib | 1.16.14 | 1 |
| library/ | fbb8456ebdb1 | stdlib | 1.16.14 | 1 |
| library/ | 05678ae4e5e1 | stdlib | 1.16.14 | 1 |
| library/ | 3d0e6df9fd5b | stdlib | 1.16.14 | 1 |
| library/ | 3c1aab708f6e | stdlib | 1.16.14 | 1 |
| library/ | 03652c675ae1 | stdlib | 1.16.14 | 1 |
| library/ | 2d1e636f0778 | stdlib | 1.16.14 | 1 |
| library/ | 091a7b5de688 | stdlib | 1.16.14 | 1 |
| library/ | 28e98eece020 | stdlib | 1.16.14 | 1 |
| library/ | 794079a7f241 | stdlib | 1.16.14 | 1 |
| library/ | addb86c0c520 | stdlib | 1.16.14 | 1 |
| library/ | 2f603f8d3abe | stdlib | 1.16.14 | 1 |
| library/ | 5d47b7bb2546 | stdlib | 1.16.14 | 1 |
| library/ | 7d0228d19042 | stdlib | 1.16.14 | 1 |
| library/ | eda951fd29a8 | stdlib | 1.16.14 | 1 |
| library/ | f5af5a5ce17f | stdlib | 1.16.14 | 1 |
| librenms/ | 4f1f3d667cc7 | stdlib | 1.16.14 | 1 |
| linuxserver/ | 938810eca3d3 | stdlib | 1.16.14 | 1 |
| livekit/ | ecf1409c75e0 | stdlib | 1.16.14 | 1 |
| lmierzwa/ | 3751e5eed656 | stdlib | 1.16.14 | 1 |
| lmierzwa/ | d417abe7ddb5 | stdlib | 1.16.14 | 1 |
| loftsh/ | 310cc7d690f5 | stdlib | 1.16.14 | 1 |
| loftsh/ | 023b13bf5898 | stdlib | 1.16.14 | 1 |
| logiqai/ | 798306811f2d | stdlib | 1.16.14 | 1 |
| longhornio/ | dca34321452c | stdlib | 1.16.14 | 1 |
| longhornio/ | ede61fe2a472 | stdlib | 1.16.14 | 1 |
| louislam/ | a4eab252e5a2 | stdlib | 1.16.14 | 1 |
| lumenvox/ | 7ff037a71c50 | stdlib | 1.16.14 | 1 |
| lumenvox/ | 9a69862e1248 | stdlib | 1.16.14 | 1 |
| macropower/ | dbb05debb785 | stdlib | 1.16.14 | 1 |
| maldridge/ | 391de2b76128 | stdlib | 1.16.14 | 1 |
| markdegroot/ | d8445f2a0de6 | stdlib | 1.16.14 | 1 |
| matrixdb/ | ba763bb01ddc | stdlib | 1.16.14 | 1 |
| matrixdb/ | 7ab06fe3d8a7 | stdlib | 1.16.14 | 1 |
| mattermost/ | 31078df7a3c8 | stdlib | 1.16.14 | 1 |
| mattermost/ | f2f987dada52 | stdlib | 1.16.14 | 1 |
| mattermost/ | 6268954edd67 | stdlib | 1.16.14 | 1 |
| mccutchen/ | 5994403ef75b | stdlib | 1.16.14 | 1 |
| mesosphere/ | 4693bb4e0814 | stdlib | 1.16.14 | 1 |
| mesosphere/ | 63bc411b930b | stdlib | 1.16.14 | 1 |