cve/2024/CVE-2024-45338.md

24 lines
989 B
Markdown
Raw Normal View History

2025-09-29 16:08:36 +00:00
### [CVE-2024-45338](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45338)
![](https://img.shields.io/static/v1?label=Product&message=golang.org%2Fx%2Fnet%2Fhtml&color=blue)
2025-09-29 21:09:30 +02:00
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-405%3A%20Asymmetric%20Resource%20Consumption%20(Amplification)&color=brightgreen)
2025-09-29 16:08:36 +00:00
### Description
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/11notes/docker-ente
- https://github.com/imjasonh/govulncheck-action
- https://github.com/k37y/gvs
- https://github.com/kaisensan/desafio-girus-pick
2025-09-29 21:09:30 +02:00
- https://github.com/seyrenus/trace-release
- https://github.com/unikorn-cloud/releases
2025-09-29 16:08:36 +00:00
- https://github.com/ytono/gcp-arcade