Lucene search
GitHub Advisory DatabaseGHSA-J3P8-6MRQ-6G7HHistoryAug 02, 2023 - 9:30 p.m.
Golang TIFF decoder vulnerable to excessive CPU consumption
2023-08-0221:30:20
CWE-834
GitHub Advisory Database
github.com
7
golang
tiff
decoder
vulnerability
excessive
cpu
consumption
malicious
image
tiled
height
width
size
software
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
| CPE | Name | Operator | Version |
|---|---|---|---|
| golang.org/x/image | lt | 0.10.0 |
References
github.com/advisories/GHSA-j3p8-6mrq-6g7h
go.dev/cl/514897
go.dev/issue/61581
lists.fedoraproject.org/archives/list/[email protected]/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6
lists.fedoraproject.org/archives/list/[email protected]/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2
lists.fedoraproject.org/archives/list/[email protected]/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK
nvd.nist.gov/vuln/detail/CVE-2023-29407
pkg.go.dev/vuln/GO-2023-1990
security.netapp.com/advisory/ntap-20230831-0009
Related
redhatcve
redhatcve
CVE-2023-29407
2023-08-07 06:19:07
osv
osv
Golang TIFF decoder vulnerable to excessive CPU consumption
2023-08-02 21:30:20
CVE-2023-29407
2023-08-02 20:15:11
gitlab
gitlab
Excessive Iteration
2023-08-02 00:00:00
debiancve
debiancve
CVE-2023-29407
2023-08-02 20:15:11
prion
prion
Code injection
2023-08-02 20:15:00
cvelist
cvelist
cve
cve
CVE-2023-29407
2023-08-02 20:15:11
veracode
veracode
Denial Of Service (DoS)
2023-08-04 02:23:22
ubuntucve
ubuntucve
CVE-2023-29407
2023-08-02 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: golang-x-image-0.13.0-1.fc39
2023-11-03 18:55:01
[SECURITY] Fedora 38 Update: golang-x-image-0.13.0-1.fc38
2023-10-16 00:43:35
[SECURITY] Fedora 37 Update: golang-x-image-0.13.0-1.fc37
2023-10-16 01:12:36
openvas
openvas
Fedora: Security Advisory for golang-x-image (FEDORA-2023-c862a1e289)
2023-10-17 00:00:00
Fedora: Security Advisory for golang-x-image (FEDORA-2023-4d95d44e7b)
2023-10-16 00:00:00
Fedora: Security Advisory for golang-x-image (FEDORA-2023-28cff1a2de)
2023-11-05 00:00:00
redos
redos
ROS-20231116-02
2023-11-16 00:00:00
nessus
nessus
Fedora 38 : golang-x-image (2023-4d95d44e7b)
2023-10-15 00:00:00
Fedora 39 : golang-x-image (2023-28cff1a2de)
2023-11-07 00:00:00
Fedora 37 : golang-x-image (2023-c862a1e289)
2023-10-15 00:00:00