Lucene search
GoogleOSV:GO-2022-0422HistoryJul 01, 2022 - 8:08 p.m.
Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb
2022-07-0120:08:04
Google
osv.dev
5
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
41.0%
The dag-pb codec can panic when decoding invalid blocks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/ipld/go-codec-dagpb | lt | 1.3.1 |
Related
github
github
go-codec-dagpb vulnerable to panic when decoding invalid blocks
2022-12-28 00:30:23
cve
cve
CVE-2022-2584
2022-12-27 22:15:12
nvd
nvd
CVE-2022-2584
2022-12-27 22:15:12
osv
osv
CVE-2022-2584
2022-12-27 22:15:12
go-codec-dagpb vulnerable to panic when decoding invalid blocks
2022-12-28 00:30:23
ipld/go-codec-dagpb panics when processing certain blocks
2022-04-08 22:08:45
veracode
veracode
Denial Of Service (DoS)
2023-01-11 08:49:47
cvelist
cvelist
prion
prion
Information disclosure
2022-12-27 22:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
41.0%
Related for OSV:GO-2022-0422