VDB
BDU%3A2022-06492
BDU%3A2022-06492
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента Decoder.Skip языка программирования Go, связанная с неконтролируемой рекурсией, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Fedora Project, The Go Project | Red Hat Enterprise Linux, Debian GNU/Linux, Fedora, Red Hat Advanced Cluster Management for Kubernetes, Go, OpenShift Developer Tools and Services |
Timeline
- Oct 28, 2022 CVE Published
References
- https://github.com/golang/go/issues/53614 url
- https://github.com/golang/go/commit/90f040ec510dd678b7860d70ca77e5682f4c7e96 url
- https://github.com/golang/go/commit/58facfbe7db2fbb9afed794b281a70bdb12a60ae url
- https://security-tracker.debian.org/tracker/CVE-2022-28131 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2107390 url
- https://github.com/golang/go/commit/08c46ed43d80bbb67cb904944ea3417989be4af3 advisory
- https://access.redhat.com/security/cve/CVE-2022-28131 advisory