Denial Of Service (DoS)

2024-05-0906:08:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

corruption checks

dos

dns message

github

golang

software

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

github.com/golang/go is vulnerable to Denial Of Service (DoS). The vulnerability is due to improper corruption checks which causes the lookup function to get stuck in an infinite loop, which allows an attacker to cause Denial of Service (DoS) by submitting a malformed DNS message.

CPENameOperatorVersion
github.com/golang/golego1.22.2
go:3.19eq1.21.9-r0
go:3.19eq1.21.4-r0
go:3.19eq1.21.5-r0
go:3.19eq1.21.8-r0
go:3.19eq1.21.3-r1
go:3.19eq1.21.7-r0
github.com/golang/golego1.22.2
go:3.19eq1.21.9-r0
go:3.19eq1.21.4-r0

Name	Operator	Version
github.com/golang/go	le	go1.22.2
go:3.19	eq	1.21.9-r0
go:3.19	eq	1.21.4-r0
go:3.19	eq	1.21.5-r0
go:3.19	eq	1.21.8-r0
go:3.19	eq	1.21.3-r1
go:3.19	eq	1.21.7-r0
github.com/golang/go	le	go1.22.2
go:3.19	eq	1.21.9-r0
go:3.19	eq	1.21.4-r0