HIGH 7.5 Go
Withdrawn Advisory: Infinite loop in xz
GHSA-q6gq-997w-f55g · BIT-golang-2020-16845 · CVE-2020-16845 · GO-2021-0142
Published · Modified
Description
Withdrawn Advisory
This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time.
Original Description
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-16845
- WEB https://github.com/ulikunitz/xz/issues/35
- WEB https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b
- WEB https://groups.google.com/forum/#!topic/golang-announce/NyPIaucMgXo
- WEB https://groups.google.com/forum/#!topic/golang-announce/_ulYYcIWg3Q
- WEB https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html
- WEB https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html
- WEB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU
- WEB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO
- WEB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O
- WEB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4
- WEB https://security.netapp.com/advisory/ntap-20200924-0002
- WEB https://www.debian.org/security/2021/dsa-4848
- WEB https://www.oracle.com/security-alerts/cpuApr2021.html
- WEB http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html
- WEB http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html
- WEB http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html
- WEB http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html
Ready to move
Start Securing
Free, no credit card | First findings in minutes