Veracode Vulnerability DatabaseVERACODE:47778

HistoryJun 27, 2024 - 7:54 a.m.

Denial Of Service (DoS)

2024-06-2707:54:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

golang

image

dos

vulnerability

color indices

crash

exploit

software

6.5 Medium

AI Score

Confidence

High

JSON

github.com/golang/image is vulnerable to Denial of Service (DoS). The vulnerability is due to invalid color indices in a corrupt or crafted image. An attacker could exploit the lack of color index checks by providing an image with invalid color indices which triggers a crash.

CPENameOperatorVersion
github.com/golang/imagelev0.17.0
golang.org/x/imagelev0.17.0
github.com/golang/imagelev0.17.0
golang.org/x/imagelev0.17.0

Name	Operator	Version
github.com/golang/image	le	v0.17.0
golang.org/x/image	le	v0.17.0
github.com/golang/image	le	v0.17.0
golang.org/x/image	le	v0.17.0

References

github.com/advisories/GHSA-9phm-fm57-rhg8

github.com/golang/image/commit/3bbf4a659e56fde394e7214ddd17673223aca672

go.dev/cl/588115

go.dev/issue/67624

pkg.go.dev/vuln/GO-2024-2937

6.5 Medium

AI Score

Confidence

High

JSON

Related for VERACODE:47778