When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.
Improper Input Validation
-
Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
---|---|---|---|---|---|
stdlib | golang | - | - | <1.21.8 | 1.21.8 |
stdlib | golang | - | - | >=1.22.0-0,<1.22.1 | 1.22.1 |
Severity and metrics
No CVSS data available from this source.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
BIT-golang-2023-45290
-
3.9
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
CGA-pq99-78pr-3fvw
-
CGA-pr9r-wvpf-hqjp
-
CGA-pr9x-8f89-6v9f
-
CGA-px7v-x96f-69x8
-
CGA-pxwr-hcvv-873g
-
CGA-q4hw-fjv6-f3c6
-
CGA-q53p-fgj2-3j2m
-
CGA-q6c3-cvj3-gxq5
-
CGA-q7mm-8vv7-2hmx
-
CGA-q8v8-6g2c-6pqg
-
CGA-q9q6-6gmc-87w8
-
CGA-qc2x-6jcp-6m74
-
CGA-qvm8-rqrv-v3m4
-
CGA-qpfc-r8vc-qvh3
-
CGA-qh35-4gxg-26mh
-
CGA-qh4p-67fg-rvf5
-
CGA-qmrw-2xfr-8cg6
-
CGA-qp47-rp74-hf7h
-
CGA-qvc9-x3v4-7g9p
-
CGA-qw79-7vc6-5mwg
-
CGA-qwc6-225w-q93x
-
CGA-qr7p-87fx-p5mv
-
CGA-qwhp-882g-xv83
-
CGA-qxhg-896q-8cc2
-
CGA-qvqx-w38r-2cm5
-
CGA-r46p-h645-2qp2
-
CGA-qx9x-j32x-h679
-
CGA-qxvw-285v-v36j
-
CGA-r584-ch4f-fmcc
-
CGA-r595-r5v6-q9cg
-
CGA-r4xq-79w2-ghjm
-
CGA-r3vm-hpm4-m4pm
-
CGA-r62p-xw3x-wxfc
-
CGA-r4x8-q3c7-4xgw
-
CGA-r72p-v7r4-f34m
-
CGA-r744-x8x7-6fwj
-
CGA-r5qq-5g23-qpp2
-
CGA-r75m-wmxc-6v4c
-
CGA-r7qr-rxvg-699x
-
CGA-r83g-p97w-m5x7
-
CGA-r694-5669-5647
-
CGA-phhx-cvhv-pvcf
-
CGA-pq7x-wgj5-xmx5
-
CGA-r8f4-hfcj-cwxc
-
CGA-rf5r-mgp6-vj8r
-
CGA-r8w6-fg6f-cph2
-
CGA-rqw5-64c9-vc44
-
CGA-r98x-24q2-r8p6
-
CGA-rgh8-2cg4-xjpp
-
CGA-rgq2-x96m-r554
-
CGA-rv45-r89r-c696
-
CGA-rvfg-939x-w6g9
-
CGA-r9w6-44m5-m839
-
CGA-rcqm-4957-whgv
-
CGA-rjch-p7pc-whcm
-
CGA-v2f4-vh79-r4f3
-
CGA-rj32-9cf4-4q59
-
CGA-rwq3-cjff-r97c
-
CGA-rgrj-vg83-f9gr
-
CGA-rrrw-qxj3-35pv
-
CGA-v2j4-gj83-82fg
-
CGA-v9vg-g8p8-cq44
-
CGA-rxjr-2m32-2hh7
-
CGA-v225-qxwx-786f
-
CGA-rm48-qq38-gfv8
-
CGA-v4xp-6478-x2mh
-
CGA-v54h-fxmj-8cj2
-
CGA-vf7j-hjq2-8wj4
-
CGA-vf7p-gcwm-vq4j
-
CGA-vjc3-fx4f-7884
-
CGA-vgxc-2fjr-mhhc
-
CGA-v42w-4hhh-52pq
-
CGA-w3cf-gfq2-r3pf
-
CGA-rx2g-p88g-2gc6
-
CGA-vc9m-xrw5-8958
-
CGA-vhx8-m48w-g2fr
-
CGA-vj9q-x5h3-534x
-
CGA-vp5x-32vm-vg3v
-
CGA-v5p8-65hg-pmwq
-
CGA-vf8w-9p68-rc99
-
CGA-vjp4-27jq-7m53
-
CGA-vm4f-5j5h-9prm
-
CGA-vp3w-x9jf-wc6v
-
CGA-w3pv-28jx-vvq6
-
CGA-w6m2-mvgx-63xm
-
CGA-vwpf-g65g-m3xv
-
CGA-wgxp-h7cv-p7rg
-
CGA-w35f-93qh-2fxh
-
CGA-w4wm-c3rm-hp2m
-
CGA-w4x6-jcmq-5r82
-
CGA-w2r3-45gm-634r
-
CGA-w4g4-rh4j-cr48
-
CGA-whxm-v4cc-q339
-
CGA-x39x-h6f7-f25r
-
CGA-wr4h-73fj-982j
-
CGA-x3vx-jw3w-v3w9
-
CGA-x9c9-jfc2-8q53
-
CGA-x9j3-prmp-qj9p
-
CGA-w99c-5jfm-cq2g
-
CGA-wfxx-5v9x-g55v
-
CGA-w9m9-rhqq-fvmv
-
CGA-wg88-chvq-9fm4
-
CGA-x7hw-qxrr-w9xq
-
CGA-xhm2-gm25-wpgg
-
CGA-xhqc-m2m4-fhwp
-
CGA-xpqh-h8hq-28q4
-
CGA-wmwv-rgr9-wqhg
-
CGA-x5gm-2r29-mf6c
-
CGA-wjhj-cw7g-vf8c
-
CGA-wjm9-r9j7-r7gm
-
CGA-wvxq-gwhf-342g
-
CGA-x5rx-7gh8-rrx9
-
CGA-xf2q-3xgm-2v87
-
CGA-xhfv-9885-2mr8
-
CGA-wr5w-wxwc-phfw
-
CGA-wr8x-fgxj-5r7v
-
CGA-wrcr-xm97-g4f2
-
CGA-wvv3-h89j-7rr4
-
CGA-ww96-42c7-xg47
-
CGA-xhxj-f5cm-473q
-
CGA-xqfm-4pw2-vgm7
-
CGA-x3jq-9452-x9cc
-
CGA-xfpv-xj5r-v4jq
-
CGA-x4c5-23x4-xg9g
-
CGA-xj84-g789-9cwv
-
CGA-xr68-h9cg-49cj
-
CGA-xg29-xrf4-rc6m
-
CGA-xm6f-2fj2-6mjc
-
CGA-xm9g-293h-px92
-
CGA-xv8q-9v3j-5x79
-
CGA-xqc7-4g5x-xwhp
-
CGA-xx96-c436-fmfp
-
CGA-cvhg-8m2r-5mg3
-
CGA-7fhp-8xhf-mpmm
-
CGA-22qq-qx8r-qwhm
-
CGA-2465-8ph3-q55m
-
CGA-2qg9-65rf-98jf
-
CGA-34wm-3g4w-r8rf
-
CGA-24mh-g4g8-223f
-
CGA-23hh-927q-9qqh
-
CGA-26j9-vj5m-w7rv
-
CGA-299h-5gfx-xcfr
-
CGA-29c7-hmm4-g9x7
-
CGA-29fv-qr97-8wf7
-
CGA-2jpj-j93r-f4qr
-
CGA-2jq5-8jv7-r4c9
-
CGA-35j9-vq7c-mf7p
-
CGA-3f4v-pcjf-wmh2
-
CGA-28wc-wrg7-2cp6
-
CGA-292x-4mv5-49vm
-
CGA-2qxv-mj5w-h43h
-
CGA-2wjw-7fp8-h456
-
CGA-2q43-p3p2-jp62
-
CGA-3778-g26c-46xx
-
CGA-2rmx-xvrx-r9pp
-
CGA-3h5r-mcgj-hqm2
-
CGA-2p4r-88cv-v9f9
-
CGA-2vqw-cfcv-xhcv
-
CGA-2w5h-fwcr-w2h2
-
CGA-2w8m-j32j-9fcr
-
CGA-33rm-83m3-hh4w
-
CGA-342q-m2jv-ff8c
-
CGA-3454-j47q-52fc
-
CGA-2vhm-85m4-258r
-
CGA-39hf-mvhp-h6c8
-
CGA-34cj-wf4r-rxcc
-
CGA-38p6-cp42-rqc4
-
CGA-3c8c-vxwq-v33h
-
CGA-3cq8-w4p6-v882
-
CGA-3hrp-m75c-cp2p
-
CGA-3cxr-9j74-62c2
-
CGA-3r6j-qhw9-m7cv
-
CGA-3x9p-grpv-c654
-
CGA-492j-37x4-cmcp
-
CGA-499h-5364-rwxc
-
CGA-4p23-xfx6-39q6
-
CGA-45mg-5hgr-8hhv
-
CGA-4fxg-vj38-g739
-
CGA-3m58-x97m-g2q3
-
CGA-42jh-4wj3-82xf
-
CGA-4fjw-3gvx-m7h8
-
CGA-4fqq-mvg9-v478
-
CGA-3mrh-qgvq-28r7
-
CGA-42wq-xxjx-hg6x
-
CGA-445j-x42w-hmxf
-
CGA-47wh-cp9c-5g6j
-
CGA-4hp3-pw6c-3jm3
-
CGA-4hpj-cpmq-cx64
-
CGA-4qvx-363x-2vp3
-
CGA-5285-ff8x-7rx3
-
CGA-43jc-5575-g8vr
-
CGA-463v-wv64-4mmv
-
CGA-4c9h-5r6g-jh8j
-
CGA-4g9h-65p4-jvxr
-
CGA-4g9r-fvvr-4www
-
CGA-3xc4-2pp3-7wqg
-
CGA-46v5-jg9h-8p3m
-
CGA-4mm2-83cw-ph7f
-
CGA-4qh4-m2gj-77j8
-
CGA-4jfw-w2fj-5jww
-
CGA-4pjw-xq33-mw2w
-
CGA-565c-jfqc-pvwf
-
CGA-564p-g7rj-gx2x
-
CGA-5f9h-gp7q-rq99
-
CGA-5j73-7x8v-xgr4
-
CGA-4xhq-ghcj-4wjp
-
CGA-57wx-hrr7-mg6c
-
CGA-59xv-4gj7-2r6x
-
CGA-5mg6-9v6g-rccw
-
CGA-59p5-hqrh-xjj4
-
CGA-644h-phr4-hjgh
-
CGA-54q4-6ggq-mf7f
-
CGA-5m3j-jg42-pgcp
-
CGA-5p3j-qwvh-xhj4
-
CGA-5q35-pr6q-2c7c
-
CGA-52gw-4hrg-c88h
-
CGA-5xmr-q5fx-mrqm
-
CGA-5w7x-rq8x-gfrm
-
CGA-63g6-wrgr-m47w
-
CGA-5wg4-vh6x-p5ch
-
CGA-63pc-xpp7-j5c9
-
CGA-5xwg-2m57-56j4
-
CGA-6858-jjc6-qmgv
-
CGA-6299-r5xq-jgf9
-
CGA-66vm-mcr5-frh3
-
CGA-6m93-3jgj-4q2w
-
CGA-64v3-7cqh-593w
-
CGA-668r-73v5-rcxw
-
CGA-68r7-j988-qxjf
-
CGA-6pv2-2w4h-p996
-
CGA-78vp-rxmm-c85r
-
CGA-69mx-3xcc-qgq5
-
CGA-6fj7-v8r5-p36v
-
CGA-6v94-cpj3-pj64
-
CGA-6xp4-9jrw-fpcx
-
CGA-6q5f-h264-25rg
-
CGA-78hj-c234-6xg4
-
CGA-78r4-rv9g-p25h
-
CGA-78vf-rq4c-34jw
-
CGA-7ch5-xv24-54h3
-
CGA-6qxf-3v6p-vj4h
-
CGA-75rj-q565-5p3g
-
CGA-6qcg-h4c6-m7c9
-
CGA-6vrf-c4j6-6597
-
CGA-6vwp-p242-mj65
-
CGA-7cwf-vcph-h6wj
-
CGA-7pwv-wx7v-gw6f
-
CGA-73fr-v764-pm53
-
CGA-7632-p2r5-jwxc
-
CGA-6x3m-6pqh-rfm9
-
CGA-6x48-f5r2-244p
-
CGA-83vm-w4vm-8vrm
-
CGA-6x39-62gx-6rq3
-
CGA-74pw-pgqf-9g7f
-
CGA-7gx7-qjxc-qpqw
-
CGA-7fw4-7525-qp4r
-
CGA-7mc3-wrg3-8rxr
-
CGA-7rr8-3665-cqcf
-
CGA-7v55-jwg5-jqvq
-
CGA-7922-98pg-98jr
-
CGA-7p4v-6hvh-f4v7
-
CGA-7phg-4jpv-jjc7
-
CGA-8g3x-x29m-87jr
-
CGA-8m4g-gqj9-vv77
-
CGA-8m85-wvxm-r2rq
-
CGA-8mgc-r9q7-xj8m
-
CGA-8hg7-wm5c-wfx5
-
CGA-84j3-329j-jvg6
-
CGA-88xh-w866-5jm3
-
CGA-8gp3-hpjp-mrmj
-
CGA-8f4p-xvjr-rg6g
-
CGA-8hh6-9f43-qc46
-
CGA-8j4f-x6f9-vgr9
-
CGA-839x-fmq6-q4xw
-
CGA-86gv-m5c5-pqj6
-
CGA-86m8-hvf5-v86r
-
CGA-86p6-vjqp-rvmc
-
CGA-8v3g-p7g7-2qj8
-
CGA-8h49-55m4-535x
-
CGA-8h5j-9jw4-w5c8
-
CGA-8h79-f46w-hqmp
-
CGA-97h6-r4mj-hr76
-
CGA-8jgq-85x4-cwrf
-
CGA-8qwq-7c4g-g5cc
-
CGA-93w5-jc2m-26gp
-
CGA-94cm-fg5v-6j6m
-
CGA-8xmx-6rr8-xcwm
-
CGA-8rgh-9529-v62h
-
CGA-98gp-fpqh-qjrc
-
CGA-9cp8-8cgw-q562
-
CGA-944p-6vxr-m4rw
-
CGA-98rr-2m9g-f8jg
-
CGA-9r7r-v3fv-32gg
-
CGA-93f3-c772-h592
-
CGA-9v82-pc88-mfrw
-
CGA-9ffp-6r7f-q6qw
-
CGA-9xp8-35fj-86hg
-
CGA-c74h-pf9m-384p
-
CGA-994f-v4h6-78hg
-
CGA-9rpg-5gwr-vv8w
-
CGA-c24r-29xx-8xp3
-
CGA-ccrr-c33v-rv6c
-
CGA-ccvw-6686-9422
-
CGA-9hhx-qgpw-fr33
-
CGA-9r6m-ccq2-4gg2
-
CGA-9vw8-2vgm-5498
-
CGA-9w36-2vwp-9m5x
-
CGA-9qr8-3p24-fmpc
-
CGA-c979-qfrw-jvrx
-
CGA-cmfm-3r5c-4wp5
-
CGA-c543-7hcp-h38q
-
CGA-ccf9-48hh-c293
-
CGA-cpj9-rq64-jv89
-
CGA-c32g-g9xq-fjmc
-
CGA-c85c-9mv2-2wfx
-
CGA-cm79-qvf9-2xfh
-
CGA-c8wc-jq6c-f7cr
-
CGA-ccwx-mx68-8xv5
-
CGA-crr3-qhgx-jrqx
-
CGA-crrj-pgph-4rhw
-
CGA-crw9-7mpv-7892
-
CGA-cj88-9552-f7mm
-
CGA-cjj7-xpfv-j5wp
-
CGA-fw9x-xjw4-6h22
-
CGA-fwc6-cr6g-cx9q
-
CGA-g4pm-v8xc-5pfx
-
CGA-g76f-x63g-48fh
-
CGA-cx94-fhv5-7ccw
-
CGA-g2v2-fcrq-626x
-
CGA-g32r-wjc4-cjp2
-
CGA-f9fp-24xv-ph4g
-
CGA-fh84-w5vf-qjmc
-
CGA-fhfw-3fm5-9f8m
-
CGA-g24j-j6h6-8mj2
-
CGA-g437-vcr2-r75m
-
CGA-fcxr-6wjg-m9fx
-
CGA-fjp3-h3jw-5cvv
-
CGA-fr69-3qfh-m9gw
-
CGA-fvw9-gg7h-p4x5
-
CGA-f7r7-9r3m-h8j5
-
CGA-fx26-hv46-8gj6
-
CGA-g3vm-79q3-9559
-
CGA-g3vr-v22w-gm76
-
CGA-fv5r-3m7c-hr8p
-
CGA-g468-wqrw-mcj9
-
CGA-fjq9-jc6p-vwgc
-
CGA-fxqq-5p95-8m25
-
CGA-g962-mc8q-6hwj
-
CGA-gg8p-cr5w-wfhw
-
CGA-g36h-hvj5-48x4
-
CGA-gcvf-pmf2-26cx
-
CGA-ghqr-f39h-9q3f
-
CGA-gp4q-qhpw-838f
-
CGA-gp56-hh7j-2vjx
-
CGA-h3hf-jw4f-qh99
-
CGA-g3c9-hwjc-6j54
-
CGA-g554-cg74-8rm4
-
CGA-g864-9mq9-x3mf
-
CGA-gg64-vgv4-x47v
-
CGA-gjwm-p9gc-q9pj
-
CGA-g5v4-wxwm-g5x5
-
CGA-gpq9-mmw8-7pq5
-
CGA-gq4c-2cm9-vj4j
-
CGA-g965-p2qv-927h
-
CGA-h7m7-7q3j-rr7j
-
CGA-gccr-97xq-5q2x
-
CGA-gcfr-xm9w-v9jx
-
CGA-gmf9-j5hv-xfg6
-
CGA-h8c3-83mw-gxc2
-
CGA-ggm3-r7jp-fhxg
-
CGA-gm4h-mphm-5q59
-
CGA-h934-c3jq-65w2
-
CGA-gpc7-gvf7-r77c
-
CGA-gpf6-m26h-rrm3
-
CGA-gv6h-wp5j-7w5m
-
CGA-hcmq-gmqw-788f
-
CGA-gw7v-qvjf-5gjg
-
CGA-hc47-r3gv-7cr9
-
CGA-h658-286m-qp9w
-
CGA-hjj3-93jq-pg3c
-
CGA-h75g-qp38-5fxp
-
CGA-hprv-8h22-pfv8
-
CGA-hxq6-3v7v-w42v
-
CGA-h8p7-548c-rqqv
-
CGA-h8r6-j367-6qxj
-
CGA-hw5f-wxcf-4m6g
-
CGA-j4gm-hgqw-qxvh
-
CGA-hq92-cv6q-5683
-
CGA-hwhw-77mr-mfmx
-
CGA-j23f-h6m3-jh73
-
CGA-j6c2-xp4q-vhg8
-
CGA-jqqc-5pp3-5hpf
-
CGA-j546-7ccp-93jq
-
CGA-j86m-3h97-xhvm
-
CGA-jp63-7f95-qcpp
-
CGA-jpf6-x693-mj3c
-
CGA-jcf6-794j-78rw
-
CGA-jx3c-4jv4-rrwm
-
CGA-j6m9-f356-7wc7
-
CGA-j929-h7gw-xjw7
-
CGA-jj9j-mxp6-xrmf
-
CGA-jj9x-qh92-r572
-
CGA-jvmw-h7j5-grxw
-
CGA-jvpr-w2mw-m326
-
CGA-jw7p-mg39-c6hq
-
CGA-m36g-jxc2-xw7j
-
CGA-mh6w-8gjw-5rhg
-
CGA-jh5m-rfv7-j3c3
-
CGA-jr82-vg26-4qpr
-
CGA-jff3-j5g4-w5c8
-
CGA-jfm4-62hx-66p7
-
CGA-jmcc-vrv6-vq96
-
CGA-jwf6-whr4-6mvh
-
CGA-jrrq-mgjx-mr3j
-
CGA-p49m-3vph-rw9f
-
CGA-jwrh-w2c3-g88x
-
CGA-jww7-g565-cp7w
-
CGA-mf9p-423w-xf4h
-
CGA-m8fh-5ww7-xpxh
-
CGA-p32f-qqgc-ff23
-
CGA-p64g-9pw8-j2gp
-
CGA-m9rr-xgrm-5mvr
-
CGA-mc8p-g293-7h33
-
CGA-mv78-hghh-q3p9
-
CGA-p2w2-8f2q-4m7w
-
CGA-p5f4-6q7g-495m
-
CGA-p5m2-fg8q-c42r
-
CGA-p5mm-jvmj-fh7g
-
CGA-mx49-j7f2-mhp9
-
CGA-p43x-hxp2-cpfr
-
CGA-p44j-r23x-6m9v
-
CGA-p69p-8cv5-x4mj
-
CGA-p4p8-3f28-gfrj
-
CGA-p773-v6mj-f6w3
-
CGA-p229-fv8m-7h8c
-
CGA-pc4f-g53c-c4gq
-
CGA-mj9g-xvqv-f64g
-
CGA-p562-3cfw-rv2w
-
CGA-ppj9-48jm-3g5g
-
CGA-mw2x-j8c4-4p82
-
CGA-p4g3-rfxm-8hh8
-
CGA-p6w6-28r4-3x3w
-