Lucene search
GitHub Advisory DatabaseGHSA-PPP9-7JFF-5VJ2HistoryDec 26, 2022 - 6:30 a.m.
golang.org/x/text/language Out-of-bounds Read vulnerability
2022-12-2606:30:22
CWE-125
GitHub Advisory Database
github.com
26
vulnerability
golang
text
language
out-of-bounds
denial-of-service
attack
software
parsing
bcp 47
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
53.6%
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.
Affected configurations
Node
xtextRange<0.3.7
References
Related
nessus
nessus
RHEL 8 : podman (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 9 : podman (Unpatched Vulnerability)
2024-06-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-04-20 08:23:13
cvelist
cvelist
CVE-2021-38561
2022-12-26 00:00:00
redhat
redhat
osv
osv
CGA-g4pj-qxwv-mvx7
2024-06-06 12:27:21
CGA-pqwf-xv4p-qj38
2024-06-06 12:26:15
CGA-92vv-799f-r2wq
2024-06-06 12:25:20
cbl_mariner
cbl_mariner
CVE-2021-38561 affecting package multus for versions less than 4.0.2-1
2024-07-23 02:21:02
CVE-2021-38561 affecting package cni for versions less than 1.1.2-2
2024-07-22 15:42:40
CVE-2021-38561 affecting package keda for versions less than 2.14.0-1
2024-07-22 15:42:40
nvd
nvd
CVE-2021-38561
2022-12-26 06:15:10
cgr
cgr
CVE-2021-38561 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container Operator may be vulnerable to denial of service due to CVE-2021-38561
2022-05-23 12:43:21
gitlab
gitlab
Out-of-bounds Read
2022-12-26 00:00:00
Out-of-bounds Read
2022-12-26 00:00:00
cve
cve
CVE-2021-38561
2022-12-26 06:15:10
prion
prion
Design/Logic Flaw
2022-12-26 06:15:00
redhatcve
redhatcve
CVE-2021-38561
2022-06-23 14:36:47
alpinelinux
alpinelinux
CVE-2021-38561
2022-12-26 06:15:10
debiancve
debiancve
CVE-2021-38561
2022-12-26 06:15:10
ubuntucve
ubuntucve
CVE-2021-38561
2022-12-26 00:00:00
wolfi
wolfi
CVE-2021-38561 vulnerabilities
2024-09-30 03:53:08
ubuntu
ubuntu
Go Text vulnerabilities
2023-02-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5873-1)
2023-02-17 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
53.6%
Related for GHSA-PPP9-7JFF-5VJ2