Denial Of Service (DoS)

2024-05-0209:46:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

denial of service

inadequate bounds checking

reader.go

slice bounds

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

github.com/onosproject/rimedo-ts is vulnerable to Denial Of Service (DoS). The vulnerability is due to inadequate bounds checking within reader.go, when accessing elements out of the slice bounds.

CPENameOperatorVersion
github.com/onosproject/rimedo-tsle0.1.1
github.com/onosproject/rimedo-tsle0.1.1

CPE	Name	Operator	Version
	github.com/onosproject/rimedo-ts	le	0.1.1
	github.com/onosproject/rimedo-ts	le	0.1.1

References

github.com/advisories/GHSA-5gh2-xv8w-34p9

github.com/onosproject/rimedo-ts/blob/v0.1.1/pkg/mho/reader.go#L14

github.com/onosproject/rimedo-ts/blob/v0.1.1/pkg/mho/reader.go#L32

github.com/onosproject/rimedo-ts/issues/16