—
GO-2022-1037
Unbounded memory consumption when reading headers in archive/tar
상세
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.