CVE-2020-16845

CVE-2020-16845 affects Go’s encoding/binary ReadUvarint/ReadVarint when fed invalid inputs, enabling an infinite read loop. Affected are Go before 1.13.15 and 1.14.x before 1.14.7. Impact is potential DoS due to resource exhaustion. Remediation: upgrade Go to versions containing the fix (Go 1.13....

CVE-2020-16845

Removed by vendor...

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

PT-2020-6058

Name of the Vulnerable Software and Affected Versions Go versions 1.13.0 through 1.13.14 Go versions 1.14.0 through 1.14.6 Description The issue is related to an infinite read loop in the ReadUvarint and ReadVarint functions in the encoding/binary package. This can occur when these functions are...

CVE-2020-16845: Loop with Unreachable Exit Condition

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

go -- encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

The Go project reports: Certain invalid inputs to ReadUvarint or ReadVarint could cause those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This could lead to processing more input than expected when the caller is reading directly from the...