Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2021/05/25 6:39 p.m.49 views

github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)

Impact xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. Patches The problem has been fixed in release v0.5.8. Workarounds Limit the size ...

7.5CVSS7.6AI score0.00433EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2021/05/25 6:39 p.m.28 views

GHSA-25XM-HR59-7C27 github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)

Impact xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. Patches The problem has been fixed in release v0.5.8. Workarounds Limit the size ...

7.5CVSS7.7AI score0.00433EPSS
Exploits0References5
OSV
OSV
added 2021/04/28 7:15 p.m.20 views

CVE-2021-29482

xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size o...

7.5CVSS6.6AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/04/28 7:15 p.m.41 views

CVE-2021-29482

xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size o...

7.5CVSS6.9AI score0.00433EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2021/04/28 6:15 p.m.38 views

CVE-2021-29482

xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size o...

7.5CVSS6.9AI score0.00433EPSS
Exploits0
Cvelist
Cvelist
added 2021/04/28 6:15 p.m.21 views

CVE-2021-29482 denial of service in github.com/ulikunitz/xz

xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size o...

7.5CVSS7.8AI score0.00433EPSS
Exploits0References2
Rows per page
Query Builder