Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-24537

Опубликовано: 06 апр. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

DNE

esm-infra/xenial

not-affected

code not present
focal

DNE

jammy

DNE

kinetic

DNE

lunar

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-apps/bionic

released

1.13.8-1ubuntu1~18.04.4+esm1
esm-apps/jammy

released

1.13.8-1ubuntu2.22.04.2
esm-apps/xenial

released

1.13.8-1ubuntu1~16.04.3+esm3
esm-infra/focal

not-affected

1.13.8-1ubuntu1.2
focal

released

1.13.8-1ubuntu1.2
jammy

released

1.13.8-1ubuntu2.22.04.2
kinetic

ignored

end of life, was needed
lunar

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

needed

focal

ignored

end of standard support, was needed
jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-apps/bionic

released

1.16.2-0ubuntu1~18.04.2+esm1
esm-apps/focal

released

1.16.2-0ubuntu1~20.04.1
focal

released

1.16.2-0ubuntu1~20.04.1
jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

needed

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

released

1.18.1-1ubuntu1~18.04.4
devel

DNE

esm-apps/bionic

released

1.18.1-1ubuntu1~18.04.4
esm-apps/xenial

released

1.18.1-1ubuntu1~16.04.4
esm-infra/focal

DNE

focal was released [1.18.1-1ubuntu1~20.04.2]
focal

released

1.18.1-1ubuntu1~20.04.2
jammy

released

1.18.1-1ubuntu1.1
kinetic

DNE

lunar

DNE

mantic

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

released

1.19.2-1ubuntu1.1
lunar

not-affected

1.19.8-1
mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal was not-affected [1.20.3-1ubuntu0.1~20.04]
focal

not-affected

1.20.3-1ubuntu0.1~20.04
jammy

not-affected

1.20.3-1ubuntu0.1~22.04
kinetic

DNE

lunar

not-affected

1.20.3-1
mantic

not-affected

1.20.3-1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

code not present
focal

DNE

jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

esm-apps/bionic

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

esm-apps/bionic

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

EPSS

Процентиль: 4%
0.0002
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 2 лет назад

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

CVSS3: 7.5
nvd
около 2 лет назад

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

CVSS3: 7.5
debian
около 2 лет назад

Calling any of the Parse functions on Go source code which contains // ...

CVSS3: 7.5
github
около 2 лет назад

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

CVSS3: 7.5
fstec
около 2 лет назад

Уязвимость функции Parse() языка программирования Golang, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%
0.0002
Низкий

7.5 High

CVSS3

Уязвимость CVE-2023-24537