Go Standard Library Compress Gzip vulnerabilities

1 known vulnerability affecting go_standard_library/compress_gzip.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-30631HIGHCVSS 7.5fixed in 1.17.12≥ 1.18.0-0, < 1.18.42022-08-10

CVE-2022-30631 [HIGH] CWE-674 CVE-2022-30631: Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an att Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.