跳转到帖子

Red Hat OpenShift: CVE-2021-38561: golang: out-of-bounds read in golang.org/x/text/language leads to DoS

recommended_posts

发布于
  • Members

Red Hat OpenShift: CVE-2021-38561: golang: out-of-bounds read in golang.org/x/text/language leads to DoS

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
12/26/2022
Created
08/21/2023
Added
08/21/2023
Modified
01/28/2025

Description

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

Solution(s)

  • linuxrpm-upgrade-cri-o
  • linuxrpm-upgrade-haproxy
  • linuxrpm-upgrade-kernel-rt
  • linuxrpm-upgrade-openshift

References

  • https://attackerkb.com/topics/cve-2021-38561
  • CVE - 2021-38561
  • RHSA-2022:5070
  • RHSA-2022:5525
  • RHSA-2022:5556
  • RHSA-2022:5908
  • RHSA-2022:5909
  • RHSA-2022:6051
  • RHSA-2022:6263
  • RHSA-2022:6287
  • RHSA-2022:6318
  • RHSA-2022:6346
  • RHSA-2022:6526
  • RHSA-2022:6537
  • RHSA-2022:7399
  • RHSA-2022:7401
  • RHSA-2022:8750
  • RHSA-2023:0245
  • RHSA-2023:0407
  • RHSA-2023:0408
  • RHSA-2023:0566
  • RHSA-2023:0652
  • RHSA-2023:0774
  • RHSA-2023:0890
  • RHSA-2023:0895
  • RHSA-2023:1326
  • RHSA-2023:1328
  • RHSA-2023:1409
  • RHSA-2023:1504
  • RHSA-2023:3542
  • RHSA-2023:4310
View more
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…