Beveiligingsadvies

CVE-2022-2879

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-14 00:00:00

Laatst bijgewerkt 2025-02-13 16:32:38

Toegewezen door Go

CVSS-score geen score

Status PUBLISHED

Beschrijving

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.

← Alle CVE's bekijken Bekijk op cve.org ↗