Lucene search
CVE-2022-1962
Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations
Show more
| Reporter | Title | Published | Views | Family All 199 |
|---|---|---|---|---|
 | Design/Logic Flaw | 10 Aug 202220:15 | – | prion |
 | Denial Of Service (DoS) | 22 Jul 202215:36 | – | veracode |
 | CVE-2022-1962 | 10 Aug 202220:15 | – | nvd |
 | CVE-2022-1962 affecting package golang 1.18.3-1 | 17 Sep 202205:56 | – | cbl_mariner |
| CVE-2022-1962 affecting package golang for versions less than 1.18.5-1 | 16 Sep 202206:05 | – | cbl_mariner |
 | BIT-golang-2022-1962 | 6 Mar 202411:02 | – | osv |
| CVE-2022-1962 | 10 Aug 202220:15 | – | osv |
| velero-1.9.2-1.1 on GA media | 15 Jun 202400:00 | – | osv |
| Stack exhaustion due to deeply nested types in go/parser | 20 Jul 202217:01 | – | osv |
| Red Hat Security Advisory: Red Hat Application Interconnect 1.0 Release (rpms) | 30 Sep 202414:23 | – | osv |
10
[
{
"vendor": "Go standard library",
"product": "go/parser",
"collectionURL": "https://pkg.go.dev",
"packageName": "go/parser",
"versions": [
{
"version": "0",
"lessThan": "1.17.12",
"status": "affected",
"versionType": "semver"
},
{
"version": "1.18.0-0",
"lessThan": "1.18.4",
"status": "affected",
"versionType": "semver"
}
],
"programRoutines": [
{
"name": "ParseFile"
},
{
"name": "ParseExprFrom"
},
{
"name": "parser.tryIdentOrType"
},
{
"name": "parser.parsePrimaryExpr"
},
{
"name": "parser.parseUnaryExpr"
},
{
"name": "parser.parseBinaryExpr"
},
{
"name": "parser.parseIfStmt"
},
{
"name": "parser.parseStmt"
},
{
"name": "resolver.openScope"
},
{
"name": "resolver.closeScope"
}
],
"defaultStatus": "unaffected"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo10 Aug 2022 20:15Current
6.7Medium risk
Vulners AI Score6.7
CVSS35.5
EPSS0.001