CVE-2022-30635 — Stack exhaustion when decoding certain messages in encoding/gob
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains…
Published: 2022-08-09 · CVSS: 7.5 · CVSS 3.1
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7