Fluid Attacks Database

Description

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10	podman	<7:5.8.2-9.el10_2	7:5.8.2-9.el10_2
rpm rhel7	rhc	-	-
rpm rhel8	rhc	<1:0.2.5-11.el8_10	1:0.2.5-11.el8_10
debian 14	golang-golang-x-text	=0.22.0-1 \|\| =0.29.0-1 \|\| =0.29.0-2 \|\| =0.31.0-1 \|\| =0.32.0-1 \|\| =0.35.0-1 \|\| =0.36.0-1 \|\| =0.36.0-1~bpo13+1 \|\| >=0 <0.40.0-1	0.40.0-1
debian 12	golang-golang-x-text	=0.10.0-1 \|\| =0.11.0-1 \|\| =0.12.0-1 \|\| =0.13.0-1 \|\| =0.14.0-1 \|\| =0.14.0-2 \|\| =0.15.0-1 \|\| =0.16.0-1 \|\| =0.16.0-1~bpo12+1 \|\| =0.22.0-1 \|\| =0.29.0-1 \|\| =0.29.0-2 \|\| =0.31.0-1 \|\| =0.32.0-1 \|\| =0.35.0-1 \|\| =0.36.0-1 \|\| =0.36.0-1~bpo13+1 \|\| =0.40.0-1 \|\| =0.41.0-1 \|\| =0.43.0-1 \|\| =0.7.0-1 \|\| =0.9.0-1	-
go	golang.org/x/text	>=0 <0.39.0	0.39.0
debian 13	golang-golang-x-text	=0.22.0-1 \|\| =0.29.0-1 \|\| =0.29.0-2 \|\| =0.31.0-1 \|\| =0.32.0-1 \|\| =0.35.0-1 \|\| =0.36.0-1 \|\| =0.36.0-1~bpo13+1 \|\| =0.40.0-1 \|\| =0.41.0-1 \|\| =0.43.0-1	-

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.