Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2459-1 | golang-1.7 security update |
Debian DLA |
DLA-2460-1 | golang-1.8 security update |
Debian DSA |
DSA-4848-1 | golang-1.11 security update |
EUVD |
EUVD-2021-2567 | Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. |
Github GHSA |
GHSA-q6gq-997w-f55g | Withdrawn Advisory: Infinite loop in xz |
Ubuntu USN |
USN-5725-1 | Go vulnerability |
Ubuntu USN |
USN-5725-2 | Go vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T13:45:33.920Z
Reserved: 2020-08-04T00:00:00
Link: CVE-2020-16845
No data.
Status : Modified
Published: 2020-08-06T18:15:13.700
Modified: 2024-11-21T05:07:15.297
Link: CVE-2020-16845
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Github GHSA
Ubuntu USN