CVE-2022-24675

golang: encoding/pem: fix stack overflow in Decode

Published Apr 20, 2022 CVSS 3.1 · 7.5 High EPSS 10.0% KEV · Not listed
Description
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-29547 encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00132}

epss

{'score': 0.00098}

Type Values Removed Values Added
First Time appeared Redhat stf
CPEs cpe:/a:redhat:service_telemetry_framework:1.5::el8 cpe:/a:redhat:stf:1.5::el8
Vendors & Products Redhat service Telemetry Framework
Redhat stf