CVE Vulnerabilities

CVE-2023-29407

Excessive Iteration

Published: Aug 02, 2023 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
6.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

Name Vendor Start Version End Version
Image Golang * 0.10.0 (excluding)
Golang-golang-x-image Ubuntu bionic *
Golang-golang-x-image Ubuntu lunar *
Golang-golang-x-image Ubuntu mantic *
Golang-golang-x-image Ubuntu trusty *
Golang-golang-x-image Ubuntu xenial *

References