Lucene search
Veracode Vulnerability DatabaseVERACODE:36480HistoryJul 25, 2022 - 12:47 p.m.
Denial Of Service (DoS)
2022-07-2512:47:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.002 Low
EPSS
Percentile
56.0%
go is vulnerable to denial of service attacks. The vulnerability exists because, when calling Reader.Read on an archive containing a large number of concatenated 0-length compressed files may cause a panic due to stack exhaustion.
References
go.dev/cl/417067
go.dev/issue/53168
go.googlesource.com/go/+/b2b8872c876201eac2d0707276c6999ff3eb185e
groups.google.com/g/golang-announce/c/nqrv9fbR0zE
lists.fedoraproject.org/archives/list/[email protected]/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/
pkg.go.dev/vuln/GO-2022-0524
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.16/community.yaml
Related
debiancve
debiancve
CVE-2022-30631
2022-08-10 20:15:41
cve
cve
CVE-2022-30631
2022-08-10 20:15:41
redhat
redhat
(RHSA-2022:6065) Important: Red Hat OpenStack Platform 16.1 (collectd-libpod-stats) security update
2022-08-15 09:38:25
(RHSA-2022:6062) Important: Red Hat OpenStack Platform 16.2 (collectd-libpod-stats) security update
2022-08-15 09:10:31
(RHSA-2022:5923) Important: Service Telemetry Framework 1.3 security update
2022-08-08 16:13:07
osv
osv
Stack exhaustion when reading certain archives in compress/gzip
2022-07-20 20:52:11
BIT-golang-2022-30631
2024-03-06 11:00:01
CVE-2022-30631
2022-08-10 20:15:41
nvd
nvd
CVE-2022-30631
2022-08-10 20:15:41
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2022-30631
2022-11-04 16:44:27
redhatcve
redhatcve
CVE-2022-30631
2022-07-15 10:32:16
alpinelinux
alpinelinux
CVE-2022-30631
2022-08-10 20:15:41
cbl_mariner
cbl_mariner
CVE-2022-30631 affecting package golang for versions less than 1.18.5-1
2022-09-16 06:05:39
CVE-2022-30631 affecting package golang 1.18.3-1
2022-09-17 05:56:44
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2 (collectd-libpod-stats) (RHSA-2022:6062)
2022-08-15 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1 (collectd-libpod-stats) (RHSA-2022:6065)
2022-08-15 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.2 (etcd) (RHSA-2022:6061)
2022-08-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-30631
2022-08-10 00:00:00
prion
prion
Design/Logic Flaw
2022-08-10 20:15:00
cvelist
cvelist
rocky
rocky
toolbox security and bug fix update
2022-11-15 06:15:31
grafana-pcp security update
2022-11-15 06:19:30
grafana-pcp security update
2022-11-08 06:25:29
almalinux
almalinux
Moderate: runc security update
2024-04-30 00:00:00
Moderate: toolbox security and bug fix update
2022-11-15 00:00:00
Moderate: grafana-pcp security update
2022-11-15 00:00:00
oraclelinux
oraclelinux
runc security update
2024-05-02 00:00:00
grafana-pcp security update
2022-11-15 00:00:00
grafana-pcp security update
2022-11-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2710)
2022-11-04 00:00:00
Mageia: Security Advisory (MGASA-2022-0262)
2022-07-18 00:00:00
openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:2672-1)
2022-08-05 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-07-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.17.12-alt1.p10
2022-07-29 00:00:00
Security fix for the ALT Linux 10 package golang version 1.18.4-alt1
2022-07-28 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2022-07-16 22:58:20
suse
suse
Security update for go1.18 (important)
2022-08-04 00:00:00
Security update for go1.17 (important)
2022-08-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0242
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0242
2022-09-07 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35
2022-08-17 01:36:21
amazon
amazon
Important: golist
2022-09-15 04:46:00