Lucene search

Veracode Vulnerability DatabaseVERACODE:34246

HistoryFeb 16, 2022 - 7:17 a.m.

Denial Of Service (DoS)

2022-02-1607:17:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

75.8%

JSON

github.com/prometheus/client_golang is vulnerable to Denial Of Service (DoS). Lack of proper handling of requests with non-standard HTTP methods allows an attacker to cause unbounded cardinality, and potential memory exhaustion.

CPENameOperatorVersion
github.com/prometheus/client_golanglev1.11.0
buildah:3.15eq1.23.1-r0
buildah:3.15eq1.23.2-r0
buildaheq1.5__5.gite94b4f9.module_el8.1.0+236+34fc7673
buildaheq1.24.2__2.module_el8.6.0+1108+b13568aa
buildaheq1.22.3__2.module_el8.6.0+926+8bef8ae7
buildaheq1.16.5__4.module_el8.4.0+575+63b40ad7
buildaheq1.19.9__1.el8
buildaheq1.19.7__2.el8
buildaheq1.7.1__2.git93747b1.el7.centos

Name	Operator	Version
github.com/prometheus/client_golang	le	v1.11.0
buildah:3.15	eq	1.23.1-r0
buildah:3.15	eq	1.23.2-r0
buildah	eq	1.5__5.gite94b4f9.module_el8.1.0+236+34fc7673
buildah	eq	1.24.2__2.module_el8.6.0+1108+b13568aa
buildah	eq	1.22.3__2.module_el8.6.0+926+8bef8ae7
buildah	eq	1.16.5__4.module_el8.4.0+575+63b40ad7
buildah	eq	1.19.9__1.el8
buildah	eq	1.19.7__2.el8
buildah	eq	1.7.1__2.git93747b1.el7.centos

Rows per page:

1-10 of 11361

References

github.com/prometheus/client_golang/pull/962

github.com/prometheus/client_golang/pull/987

github.com/prometheus/client_golang/releases/tag/v1.11.1

github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p

lists.fedoraproject.org/archives/list/[email protected]/message/2IK53GWZ475OQ6ENABKMJMTOBZG6LXUR/

lists.fedoraproject.org/archives/list/[email protected]/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D/

lists.fedoraproject.org/archives/list/[email protected]/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH/

lists.fedoraproject.org/archives/list/[email protected]/message/3L6GDN5S5QZSCFKWD3GKL2RDZQ6B4UWA/

lists.fedoraproject.org/archives/list/[email protected]/message/4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3/

lists.fedoraproject.org/archives/list/[email protected]/message/5OGNAFVXSMTTT2UPH6CS3IH6L3KM42Q7/

lists.fedoraproject.org/archives/list/[email protected]/message/7V7I72LSQ3IET3QJR6QPAVGJZ4CBDLN5/

lists.fedoraproject.org/archives/list/[email protected]/message/AK7CJBCGERCRXYUR2EWDSSDVAQMTAZGX/

lists.fedoraproject.org/archives/list/[email protected]/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/

lists.fedoraproject.org/archives/list/[email protected]/message/FY3N7H6VSDZM37B4SKM2PFFCUWU7QYWN/

lists.fedoraproject.org/archives/list/[email protected]/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ/

lists.fedoraproject.org/archives/list/[email protected]/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/

lists.fedoraproject.org/archives/list/[email protected]/message/KBMVIQFKQDSSTHVVJWJ4QH6TW3JVB7XZ/

lists.fedoraproject.org/archives/list/[email protected]/message/MH6ALXEQXIFQRQFNJ5Y2MJ5DFPIX76VN/

lists.fedoraproject.org/archives/list/[email protected]/message/RN7JGC2LVHPEGSJYODFUV5FEKPBVG4D7/

lists.fedoraproject.org/archives/list/[email protected]/message/SASRKYHT5ZFSVMJUQUG3UAEQRJYGJKAR/

lists.fedoraproject.org/archives/list/[email protected]/message/ZKORFJTRRDJCWBTJPISKKCVMMMJBIRLG/

lists.fedoraproject.org/archives/list/[email protected]/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/

0.005 Low

EPSS

Percentile

75.8%

JSON

Related for VERACODE:34246