CVE-2022-39213

🗓️ 15 Sep 2022 21:45:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 97 Views

go-cvss module parsing full CVSS v2.0 vector strings is vulnerable to Out-of-Bounds Read leading to panic. Patched in v0.4.0, users should upgrade or parse incomplete vectors

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-39213	16 Sep 202202:28	–	circl
CNNVD	Go-CVSS 缓冲区错误漏洞	15 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-39213 Out-of-bounds Read in go-cvss	15 Sep 202221:45	–	cvelist
EUVD	EUVD-2022-6978	3 Oct 202520:07	–	euvd
Github Security Blog	Go-CVSS has Out-of-bounds Read vulnerability in ParseVector function	16 Sep 202220:59	–	github
NVD	CVE-2022-39213	15 Sep 202222:15	–	nvd
OSV	CVE-2022-39213 Out-of-bounds Read in go-cvss	15 Sep 202221:45	–	osv
OSV	GHSA-XHMF-MMV2-4HHX Go-CVSS has Out-of-bounds Read vulnerability in ParseVector function	16 Sep 202220:59	–	osv
OSV	GO-2022-1002 Panic in github.com/pandatix/go-cvss	21 Sep 202215:12	–	osv
Prion	Out-of-bounds	15 Sep 202222:15	–	prion

NVD

Vulners

Node

pandatix go-cvssRange0.2.0–0.4.0go

[
  {
    "product": "go-cvss",
    "vendor": "pandatix",
    "versions": [
      {
        "status": "affected",
        "version": ">= 0.2.0, < 0.4.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/pandatix/go-cvss/commit/d9d478ff0c13b8b09ace030db9262f3c2fe031f4
github	www.github.com/pandatix/go-cvss/blob/master/SECURITY.md
github	www.github.com/pandatix/go-cvss/security/advisories/GHSA-xhmf-mmv2-4hhx