Lack of data validation In toolbox
Description
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service (DoS) conditions.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 go | 1.22.3 | ||
 rpm rhel8 | 0:9.2.10-17.el8_10 | ||
rpm rhel9 | 4:1.1.13-4.el9 | ||
rpm rhel9 | - | - | |
rpm rhel9 | 0:0.0.99.5-5.el9 | ||
rpm rhel9 | 0:1.2.10-2.el9 | ||
rpm rhel9 | 0:10.2.6-4.el9 | ||
rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel9 | 1:1.5.1-2.el9 |
1-10 of 16
10
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.