logo

Database

Improper control of interaction frequency In stdlib

Description

Indefinite hang with large buffers on Windows in crypto/rand On Windows, rand.Read will hang indefinitely if passed a buffer larger than 1 << 32 - 1 bytes.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-306342. NVD-2022-306343. OSV-GO-2022-04774. OSV-2022-306345. GCVE-2022-30634

References

1. https://go.dev/cl/4022572. https://go.googlesource.com/go/+/bb1f4416180511231de6d17a1f2f55c82aafc8633. https://go.dev/issue/525614. https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.