Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/07/01 8:35 p.m.34 views

Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

7.5CVSS7.2AI score0.01105EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder