go -- archive/zip: overflow in preallocation check can cause OOM panicentered 2021-09-10
no CVE referenced
CVE details
CVE-2021-39293
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
- Score
- 7.5 high
- Published
- 2022-01-24
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.