Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-30634

Опубликовано: 15 июл. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

РелизСтатусПримечание
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
impish

ignored

end of life
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
devel

DNE

impish

ignored

end of life
jammy

needs-triage

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
bionic

not-affected

windows only
devel

DNE

esm-apps/bionic

not-affected

windows only
esm-apps/xenial

not-affected

windows only
esm-infra/focal

DNE

focal was not-affected [windows only]
focal

not-affected

windows only
jammy

not-affected

windows only
kinetic

DNE

lunar

DNE

mantic

DNE

Показывать по

РелизСтатусПримечание
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
esm-apps/bionic

needs-triage

upstream

not-affected

debian: Only affects Go on Windows

Показывать по

EPSS

Процентиль: 3%
0.0002
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

CVSS3: 7.5
debian
почти 3 года назад

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 o ...

CVSS3: 7.5
github
почти 3 года назад

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

suse-cvrf
около 3 лет назад

Security update for go1.18

suse-cvrf
около 3 лет назад

Security update for go1.17

EPSS

Процентиль: 3%
0.0002
Низкий

7.5 High

CVSS3