CVE-2022-30634

Indefinite hang with large buffers on Windows in crypto/rand

published July 15, 2022

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02260 · 82.8th percentile
Published
2022-07-15T19:36Z
EPSS history
Timeline
  • 15 JUL 19:36Z
    Indefinite hang with large buffers on Windows in crypto/rand
    cvelistv5