Описание
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-apps/bionic | released | 1.13.8-1ubuntu1~18.04.4+esm1 |
| esm-apps/jammy | released | 1.13.8-1ubuntu2.22.04.2 |
| esm-apps/xenial | released | 1.13.8-1ubuntu1~16.04.3+esm3 |
| esm-infra/focal | not-affected | 1.13.8-1ubuntu1.2 |
| focal | released | 1.13.8-1ubuntu1.2 |
| jammy | released | 1.13.8-1ubuntu2.22.04.2 |
| lunar | DNE | |
| mantic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-apps/bionic | released | 1.16.2-0ubuntu1~18.04.2+esm1 |
| esm-apps/focal | released | 1.16.2-0ubuntu1~20.04.1 |
| focal | released | 1.16.2-0ubuntu1~20.04.1 |
| jammy | DNE | |
| lunar | DNE | |
| mantic | DNE | |
| trusty | ignored | end of standard support |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.18.1-1ubuntu1~18.04.4 |
| devel | DNE | |
| esm-infra/focal | DNE | focal was released [1.18.1-1ubuntu1~20.04.2] |
| focal | released | 1.18.1-1ubuntu1~20.04.2 |
| impish | DNE | |
| jammy | released | 1.18.1-1ubuntu1.1 |
| kinetic | DNE | |
| lunar | DNE | |
| trusty | DNE | |
| upstream | needs-triage |
Показывать по
7.5 High
CVSS3
Связанные уязвимости
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.1 ...
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
7.5 High
CVSS3