golang.org/x/text/language Out-of-bounds Read vulnerability

🗓️ 26 Dec 2022 06:30:22Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 35 Views

golang.org/x/text/language Out-of-bounds Rea

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)	22 Jun 202320:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	16 Jun 202315:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2021-3121, CVE-2021-38561, CVE-2023-43804)	23 Jul 202520:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift (CVE-2022-24842,CVE-2021-38561,CVE-2021-43565,CVE-2022-28327,CVE-2022-24675,CVE-2022-27536)	29 Jun 202222:44	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of golang.org/x/text, IBM Database Operator for Foundationdb is vulnerable to denial of service attack.	16 Mar 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2021-38561	8 Aug 202210:06	–	ibm

Vulners

Node

x textRange<0.3.7go

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38561
deps	www.deps.dev/advisory/OSV/GO-2021-0113
go	www.go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f
groups	www.groups.google.com/g/golang-announce
pkg	www.pkg.go.dev/golang.org/x/text/language
go	www.go.dev/cl/340830
pkg	www.pkg.go.dev/vuln/GO-2021-0113
github	www.github.com/advisories/GHSA-ppp9-7jff-5vj2

02 Oct 2023 11:21Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00053

SSVC

vulnerability golang text language out-of-bounds denial-of-service attack software parsing bcp 47