Skip to main content
Version: latest

CVE-2022-2879

CVE Details

Visit the official vulnerability details page for CVE-2022-2879 to learn more.

Initial Publication

10/25/2024

Last Update

02/14/2025

Third Party Dependency

go

NIST CVE Summary

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.

CVE Severity

7.5

Our Official Summary

This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.

Status

Ongoing

Affected Products & Versions

This CVE is non-impacting as the impacting symbol and/or function is not used in the product

Revision History

No revisions available.