Lucene search
Veracode Vulnerability DatabaseVERACODE:39060HistoryJan 31, 2023 - 2:39 a.m.
Denial Of Service (DoS)
2023-01-3102:39:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
denial of service
vulnerability
git.go
application crash
user input
maliciously crafted
git credentials
rancher/wrangler
0.001 Low
EPSS
Percentile
46.5%
github.com/rancher/wrangler is vulnerable to Denial Of Service (DoS). The vulnerability exists in multiple functions of git.go as it does not properly validate the Git credential user input, which allows an attacker to cause an application crash by providing maliciously crafted Git credentials.
References
bugzilla.suse.com/show_bug.cgi?id=1205296
github.com/advisories/GHSA-8fcj-gf77-47mg
github.com/rancher/wrangler/commit/12397eec50155cb2d24aa70bdf9e90c5f3b9a727
github.com/rancher/wrangler/commit/341018c8fef3e12867c7cb2649bd2cecac75f287
github.com/rancher/wrangler/commit/5a387e13e8d51e3340d9e5012a1951f0cca5fc90
github.com/rancher/wrangler/commit/8649ecc062204f28764fd80157a621cbae89c9cf
Related
cve
cve
CVE-2022-43756
2023-02-07 13:15:09
osv
osv
CVE-2022-43756
2023-02-07 13:15:09
Denial of service (DoS) when processing Git credentials
2023-01-25 19:40:26
cvelist
cvelist
nvd
nvd
CVE-2022-43756
2023-02-07 13:15:09
github
github
Denial of service (DoS) when processing Git credentials
2023-01-25 19:40:26
prion
prion
Design/Logic Flaw
2023-02-07 13:15:00