Lucene search

K
osvGoogleOSV:GO-2024-2958
HistoryJul 02, 2024 - 7:19 p.m.

Potential memory exhaustion attack due to sparse slice deserialization in github.com/gorilla/schema

2024-07-0219:19:24
Google
osv.dev
2
memory exhaustion
attack
sparse slice
deserialization
gorilla schema
software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

Potential memory exhaustion attack due to sparse slice deserialization in github.com/gorilla/schema

CPENameOperatorVersion
github.com/gorilla/schemalt1.4.1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low