CVE-2022-2879

🗓️ 14 Oct 2022 00:00:00Reported by GoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 467 Views

CVE-2022-2879: Unbounded memory allocation in Reader.Rea

Reporter	Title	Published	Views	Family All 316
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the mongo-tools utility affect IBM WebSphere Automation	29 Mar 202317:13	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Apr 202319:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to multiple software weaknesses due to Golang	4 Apr 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.1 addresses security vulnerability listed in CVE below.	19 Jul 202300:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	12 Apr 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	24 Feb 202319:49	–	ibm

NVD

Node

golang goRange<1.18.7

golang goRange1.19.0–1.19.2

[
  {
    "vendor": "Go standard library",
    "product": "archive/tar",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "archive/tar",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.18.7",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.19.0-0",
        "lessThan": "1.19.2",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "Reader.next"
      },
      {
        "name": "parsePAX"
      },
      {
        "name": "Writer.writePAXHeader"
      },
      {
        "name": "Reader.Next"
      },
      {
        "name": "Writer.WriteHeader"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
go	www.go.dev/issue/54853
groups	www.groups.google.com/g/golang-announce/c/xtuG5faxtaU
security	www.security.gentoo.org/glsa/202311-09
go	www.go.dev/cl/439355
pkg	www.pkg.go.dev/vuln/GO-2022-1037

21 Nov 2024 07:01Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.00016

CWE-770