Vulnerability Report: GO-2021-0172

standard library

When parsing large multipart/form-data, an attacker can cause a HTTP server to open a large number of file descriptors. This may be used as a denial-of-service vector.

Affected Packages

  • Path
    Go Versions
    Symbols
  • before go1.6.4, from go1.7.0-0 before go1.7.4
    1 unexported affected symbols
    • Reader.readForm

Aliases

References

Credits

  • Simon Rawet

Feedback

See anything missing or incorrect? Suggest an edit to this report.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL