CVE-2021-33196
Description
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archives header) can cause a NewReader or OpenReader panic.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.056
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update go-toolset-1.15.14-1.module+el8.4.0+11833+614b07b8.x86_64.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-1.15.14-1.module+el8.4.0+11833+614b07b8.x86_64.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-bin-1.15.14-1.module+el8.4.0+11833+614b07b8.x86_64.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-docs-1.15.14-1.module+el8.4.0+11833+614b07b8.noarch.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-misc-1.15.14-1.module+el8.4.0+11833+614b07b8.noarch.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-race-1.15.14-1.module+el8.4.0+11833+614b07b8.x86_64.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-src-1.15.14-1.module+el8.4.0+11833+614b07b8.noarch.rpm | Linux |
| (RHSA-2021:3076) go-toolset:rhel8 security, bug fix, and enhancement update golang-tests-1.15.14-1.module+el8.4.0+11833+614b07b8.noarch.rpm | Linux |
| Delve update (ELSA-2021-3076) delve-1.5.0-2.0.1.module+el8.4.0+20021+8a86d991.x86_64.rpm | Linux |
| Go-toolset update (ELSA-2021-3076) go-toolset-1.15.14-1.module+el8.4.0+20290+7af514f4.x86_64.rpm | Linux |
| Golang update (ELSA-2021-3076) golang-1.15.14-1.module+el8.4.0+20290+7af514f4.x86_64.rpm | Linux |
| Golang-bin update (ELSA-2021-3076) golang-bin-1.15.14-1.module+el8.4.0+20290+7af514f4.x86_64.rpm | Linux |
| Golang-docs update (ELSA-2021-3076) golang-docs-1.15.14-1.module+el8.4.0+20290+7af514f4.noarch.rpm | Linux |
| Golang-misc update (ELSA-2021-3076) golang-misc-1.15.14-1.module+el8.4.0+20290+7af514f4.noarch.rpm | Linux |
| Golang-race update (ELSA-2021-3076) golang-race-1.15.14-1.module+el8.4.0+20290+7af514f4.x86_64.rpm | Linux |
| Golang-src update (ELSA-2021-3076) golang-src-1.15.14-1.module+el8.4.0+20290+7af514f4.noarch.rpm | Linux |
| Golang-tests update (ELSA-2021-3076) golang-tests-1.15.14-1.module+el8.4.0+20290+7af514f4.noarch.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-1.19.3-2.amzn2023.0.2.x86_64.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-bin-1.19.3-2.amzn2023.0.2.x86_64.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-docs-1.19.3-2.amzn2023.0.2.noarch.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-misc-1.19.3-2.amzn2023.0.2.noarch.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-race-1.19.3-2.amzn2023.0.2.x86_64.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-shared-1.19.3-2.amzn2023.0.2.x86_64.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-src-1.19.3-2.amzn2023.0.2.noarch.rpm | Linux |
| golang Security Update (ALAS2023-2023-048) golang-tests-1.19.3-2.amzn2023.0.2.noarch.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234