Denial Of Service (DoS)

2021-03-1103:11:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

29.9%

JSON

archive/zip in github.com/golang/go is vulnerable to denial of service (DoS). The use of Reader.Open API on a Zip file that contains a file prefixed with “…/”, such as Open(...) causes a panic in the function toValidName when attempting to strip the prefixed path components.

CPENameOperatorVersion
github.com/golang/golego1.16
go:3.13eq1.15.7-r0
golang-1.16:sideq1.16-1
go:edgeeq1.14.3-r0
go:edgeeq1.13.10-r0
go:edgeeq1.13.8-r0
go:edgeeq1.16-r0
github.com/golang/golego1.16
go:3.13eq1.15.7-r0
golang-1.16:sideq1.16-1

Name	Operator	Version
github.com/golang/go	le	go1.16
go:3.13	eq	1.15.7-r0
golang-1.16:sid	eq	1.16-1
go:edge	eq	1.14.3-r0
go:edge	eq	1.13.10-r0
go:edge	eq	1.13.8-r0
go:edge	eq	1.16-r0
github.com/golang/go	le	go1.16
go:3.13	eq	1.15.7-r0
golang-1.16:sid	eq	1.16-1