CVE-2021-33196

Debian Bug report logs - #989492 golang-116: CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion Package: src:golang-116; Maintainer for src:golang-116 is Go Compiler Team <team+go-compiler@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 Jun 2 ...

A vulnerability was found in archive/zip of the Go standard library Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files (CVE-2021-33196) A flaw was found in golang A panic can be triggered by an attacker in a privileged network position without access to the server certificate's private key, ...

No description is available for this CVE ...

A security issue has been found in Go Due to a pre-allocation optimization in zipNewReader, a malformed archive which indicates it has a significant number of files can cause either a panic or memory exhaustion ...

A vulnerability was found in archive/zip of the Go standard library Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files (CVE-2021-33196) There's an uncontrolled resource consumption flaw in golang's net/http library in the canonicalHeader() function An attacker who submits specially crafted ...