Lucene search

K
cvelistGoCVELIST:CVE-2022-30634
HistoryJul 15, 2022 - 7:36 p.m.

CVE-2022-30634 Indefinite hang with large buffers on Windows in crypto/rand

2022-07-1519:36:19
Go
raw.githubusercontent.com
3

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.2%

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.2%