Описание
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-golang-x-net | fixed | 1:0.56.0-1 | package | |
| golang-golang-x-net | not-affected | trixie | package | |
| golang-golang-x-net | not-affected | bookworm | package | |
| golang-golang-x-net | not-affected | bullseye | package |
Примечания
https://github.com/golang/go/issues/79795
Fixed by: https://github.com/golang/net/commit/82e7868a02167540748b74780b0bf825985256f7 (v0.56.0)
Introduced with: https://github.com/golang/net/commit/bb2055dafd28a92822d2297d3121c7498d58f1f6 (v0.47.0)
EPSS
Связанные уязвимости
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
EPSS