Описание
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
Отчет
Important: This flaw in the golang.org/x/text library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected norm.Iter functionality, causing it to enter an infinite loop and become unresponsive.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | rhai/assisted-installer-rhel9 | Not affected | ||
| AWS Load Balancer Operator | albo/aws-load-balancer-rhel9-operator | Affected | ||
| Builds for Red Hat OpenShift | openshift-builds/openshift-builds-waiters-rhel9 | Affected | ||
| Compliance Operator | compliance/openshift-compliance-rhel8-operator | Affected | ||
| Confidential Cluster Operator | confidential-clusters-beta/attestation-key-register-rhel9 | Under investigation | ||
| Confidential Cluster Operator | confidential-clusters-beta/compute-pcrs-rhel9 | Under investigation | ||
| Confidential Cluster Operator | confidential-clusters-beta/confidential-cluster-operator-bundle | Under investigation | ||
| Confidential Cluster Operator | confidential-clusters-beta/confidential-cluster-rhel9-operator | Under investigation | ||
| Confidential Cluster Operator | confidential-clusters-beta/registration-server-rhel9 | Under investigation | ||
| Confidential Compute Attestation | build-of-trustee/trustee-rhel9-operator | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
A norm.Iter can enter an infinite loop when handling input containing ...
EPSS
7.5 High
CVSS3