cve/2024/CVE-2024-45338.md
2025-09-29 16:08:36 +00:00

22 lines
911 B
Markdown

### [CVE-2024-45338](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45338)
![](https://img.shields.io/static/v1?label=Product&message=golang.org%2Fx%2Fnet%2Fhtml&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%200.33.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-405%3A%20Asymmetric%20Resource%20Consumption%20(Amplification)&color=brighgreen)
### Description
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/11notes/docker-ente
- https://github.com/imjasonh/govulncheck-action
- https://github.com/k37y/gvs
- https://github.com/kaisensan/desafio-girus-pick
- https://github.com/ytono/gcp-arcade