GO-2021-0113
Out-of-bounds read in golang.org/x/text/language
At a glance
- Published
- Updated
- CVE
- CVE-2021-38561
- Aliases
- GHSA-ppp9-7jff-5vj2
Description
Due to improper index calculation, an incorrectly formatted language tag can cause Parse to panic via an out of bounds read. If Parse is used to process untrusted user inputs, this may be used as a vector for a denial of service attack.
Affected packages
| Package | Versions |
|---|---|
| Go · golang.org/x/text | introduced 0, fixed 0.3.7 |
References
- https://go.dev/cl/340830 FIX
- https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |