Описание
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-buger-jsonparser | fixed | 1.1.2-1 | package | |
| golang-github-buger-jsonparser | no-dsa | trixie | package | |
| golang-github-buger-jsonparser | no-dsa | bookworm | package | |
| golang-github-buger-jsonparser | postponed | bullseye | package |
Примечания
https://github.com/buger/jsonparser/issues/275
EPSS
Связанные уязвимости
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
github.com/buger/jsonparser has a denial of service vulnerability
Уязвимость функции Delete() языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
EPSS