Security Advisory

CVE-2021-39293

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-24 00:00:00

Last updated 2024-08-04 02:06:41

Assigner mitre

State PUBLISHED

Description

In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.

← Browse all CVEs View on cve.org ↗