encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.
References
Link | Resource |
---|---|
https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202208-02 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-03-10T23:54:43
Updated: 2022-08-04T15:11:04
Reserved: 2021-03-03T00:00:00
Link: CVE-2021-27918
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-03-11T00:15:12.030
Modified: 2022-12-13T16:28:13.860
Link: CVE-2021-27918
JSON object: View
Redhat Information
No data.
CWE