Lucene search

K
redosRedosROS-20240611-15
HistoryJun 11, 2024 - 12:00 a.m.

ROS-20240611-15

2024-06-1100:00:00
redos.red-soft.ru
10
golang
vulnerability
zip files
access restrictions

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.9%

Vulnerability in archive-zip component of Golang programming language is related to incorrect processing of zip files.
zip files. Exploitation of the vulnerability could allow an attacker to create a potentially dangerous zip file

A vulnerability in the net-netip component of the Golang programming language is related to incorrect operation of the Is
(IsPrivate, IsLoopback, etc.) methods. Exploitation of the vulnerability could allow an intruder to bypass the existing
access restriction policy

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64golang< 1.21.8-2UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.9%