Denial Of Service (DoS)

2022-07-2513:14:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

56.0%

JSON

go is vulnerable to Denial Of Service (DoS). The vulnerability exists in Glob function in match.go due to stack exhaustion because having a large number of path separators in Glob which allows an attacker to cause an application crash.

CPENameOperatorVersion
go:3.16eq1.18.1-r1
go:3.16eq1.18.2-r0
go:edgeeq1.16-r0
go:edgeeq1.16.2-r0
go:edgeeq1.17.3-r0
go:edgeeq1.18-r1
go:edgeeq1.18.3-r0
go:edgeeq1.18.3-r1
go:edgeeq1.17.8-r0
go:edgeeq1.13.10-r0

Name	Operator	Version
go:3.16	eq	1.18.1-r1
go:3.16	eq	1.18.2-r0
go:edge	eq	1.16-r0
go:edge	eq	1.16.2-r0
go:edge	eq	1.17.3-r0
go:edge	eq	1.18-r1
go:edge	eq	1.18.3-r0
go:edge	eq	1.18.3-r1
go:edge	eq	1.17.8-r0
go:edge	eq	1.13.10-r0