Lucene search
Veracode Vulnerability DatabaseVERACODE:37564HistoryOct 14, 2022 - 11:54 a.m.
Denial Of Service (DoS)
2022-10-1411:54:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
denial of service
vulnerability
go software
remote attacker
memory allocation
resource exhaustion
0.002 Low
EPSS
Percentile
58.9%
go is vulnerable to denial of service (DoS) attacks. A remote attacker is able to allocate unbounded amounts of memory using Reader.Read via passing a maliciously crafted archive, causing a system crash due to resource exhaustion.
References
github.com/golang/go/commit/0a723816cd205576945fa57fbdde7e6532d59d08
github.com/golang/go/commit/4fa773cdefd20be093c84f731be7d4febf5536fa
github.com/golang/go/issues/54853
github.com/golang/go/issues/55925
github.com/golang/go/issues/55926
go.dev/cl/439355
go.dev/issue/54853
groups.google.com/g/golang-announce/c/xtuG5faxtaU
groups.google.com/g/golang-announce/c/xtuG5faxtaU
lists.fedoraproject.org/archives/list/[email protected]/message/THKJHFMX4DAZXJ5MFPN3BNHZDN7BW5RI/
pkg.go.dev/vuln/GO-2022-1037
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.16/community.yaml
Related
nessus
nessus
CBL Mariner 2.0 Security Update: golang / ig (CVE-2022-2879)
2024-07-03 00:00:00
Fedora 36 : golang (2022-0e313cc582)
2022-12-23 00:00:00
Amazon Linux 2 : golist (ALAS-2023-1913)
2023-01-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-2879 affecting package cri-o for versions less than 1.30.1-1
2024-06-21 09:32:44
CVE-2022-2879 affecting package golang 1.17.13-2
2024-07-05 21:08:35
CVE-2022-2879 affecting package ig for versions less than 0.29.0-1
2024-06-21 09:32:44
osv
osv
BIT-golang-2022-2879
2024-03-06 11:01:17
Unbounded memory consumption when reading headers in archive/tar
2022-10-06 16:26:05
CVE-2022-2879
2022-10-14 15:15:17
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to denial of service due to [CVE-2022-2879]
2023-01-26 15:21:28
prion
prion
Design/Logic Flaw
2022-10-14 15:15:00
nvd
nvd
CVE-2022-2879
2022-10-14 15:15:17
cvelist
cvelist
debiancve
debiancve
CVE-2022-2879
2022-10-14 15:15:17
redhatcve
redhatcve
CVE-2022-2879
2023-02-09 21:20:08
alpinelinux
alpinelinux
CVE-2022-2879
2022-10-14 15:15:17
ubuntucve
ubuntucve
CVE-2022-2879
2022-10-14 00:00:00
cnvd
cnvd
Google Golang Denial of Service Vulnerability
2022-10-11 00:00:00
cve
cve
CVE-2022-2879
2022-10-14 15:15:17
amazon
amazon
Important: golist
2023-01-18 00:17:00
Important: golang
2022-12-01 20:31:00
fedora
fedora
[SECURITY] Fedora 36 Update: golang-1.18.7-1.fc36
2022-10-14 13:01:37
[SECURITY] Fedora 37 Update: golang-1.19.2-1.fc37
2022-10-17 22:55:43
openvas
openvas
Fedora: Security Advisory for golang (FEDORA-2022-0e313cc582)
2022-10-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3668-1)
2022-10-20 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-59a20edab2)
2022-10-18 00:00:00
rocky
rocky
go-toolset and golang security and bug fix update
2023-01-23 14:30:17
go-toolset:rhel8 security and bug fix update
2023-01-25 08:59:15
almalinux
almalinux
Moderate: go-toolset and golang security and bug fix update
2023-01-23 00:00:00
Moderate: go-toolset:rhel8 security and bug fix update
2023-01-25 00:00:00
Moderate: Image Builder security, bug fix, and enhancement update
2023-05-16 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0273
2022-11-02 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0273
2022-11-02 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0478
2022-10-27 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-10-04 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security and bug fix update
2023-01-26 00:00:00
go-toolset and golang security and bug fix update
2023-01-24 00:00:00
Image Builder security, bug fix, and enhancement update
2023-05-24 00:00:00
suse
suse
Security update for go1.19 (important)
2022-10-20 00:00:00
Security update for go1.18 (important)
2022-10-20 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.7-alt1
2022-10-18 00:00:00
redhat
redhat
(RHSA-2023:0445) Moderate: go-toolset-1.18 security update
2023-01-25 08:25:10
(RHSA-2023:0708) Moderate: Release of OpenShift Serverless Client kn 1.27.0
2023-02-09 09:22:38
mageia
mageia
Updated golang packages fix security vulnerability
2022-10-19 02:14:56
ubuntu
ubuntu
Go vulnerabilities
2023-04-25 00:00:00
Go vulnerabilities
2024-01-09 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00