Vulnerabilities > CVE-2022-30634 - Infinite Loop vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

golang

netapp

CWE-835

NVD

Published: 2022-07-15

Updated: 2023-11-07

Summary

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.

Vulnerable Configurations

Part	Description	Count
Application	Golang Golang GO - Golang GO 0.0.0-20201203163018-Be400Aefbc4C Golang GO 1.0 Golang GO 1.0.1 Golang GO 1.0.2 Golang GO 1.0.3 Golang GO 1.1 Golang GO 1.1.1 Golang GO 1.1.2 Golang GO 1.2 Golang GO 1.2.1 Golang GO 1.2.2 Golang GO 1.3 Golang GO 1.3.1 Golang GO 1.3.2 Golang GO 1.3.3 Golang GO 1.4 Golang GO 1.4.1 Golang GO 1.4.2 Golang GO 1.4.3 Golang GO 1.5 Golang GO 1.5.1 Golang GO 1.5.2 Golang GO 1.5.3 Golang GO 1.5.4 Golang GO 1.6 Golang GO 1.6.1 Golang GO 1.6.2 Golang GO 1.6.3 Golang GO 1.6.4 Golang GO 1.7 Golang GO 1.7.1 Golang GO 1.7.2 Golang GO 1.7.3 Golang GO 1.7.4 Golang GO 1.7.5 Golang GO 1.7.6 Golang GO 1.8 Golang GO 1.8.1 Golang GO 1.8.2 Golang GO 1.8.3 Golang GO 1.8.4 Golang GO 1.8.5 Golang GO 1.8.6 Golang GO 1.8.7 Golang GO 1.9 Golang GO 1.9.1 Golang GO 1.9.2 Golang GO 1.9.3 Golang GO 1.9.4 Golang GO 1.9.5 Golang GO 1.9.6 Golang GO 1.9.7 Golang GO 1.10 Golang GO 1.10.1 Golang GO 1.10.2 Golang GO 1.10.3 Golang GO 1.10.4 Golang GO 1.10.5 Golang GO 1.10.6 Golang GO 1.10.7 Golang GO 1.10.8 Golang GO 1.11.0 Golang GO 1.11.1 Golang GO 1.11.2 Golang GO 1.11.3 Golang GO 1.11.4 Golang GO 1.11.5 Golang GO 1.11.6 Golang GO 1.11.7 Golang GO 1.11.8 Golang GO 1.11.9 Golang GO 1.11.10 Golang GO 1.11.11 Golang GO 1.11.12 Golang GO 1.11.13 Golang GO 1.12 Golang GO 1.12.0 Golang GO 1.12.1 Golang GO 1.12.2 Golang GO 1.12.3 Golang GO 1.12.4 Golang GO 1.12.5 Golang GO 1.12.6 Golang GO 1.12.7 Golang GO 1.12.8 Golang GO 1.12.9 Golang GO 1.12.10 Golang GO 1.12.11 Golang GO 1.12.12 Golang GO 1.12.13 Golang GO 1.12.14 Golang GO 1.12.15 Golang GO 1.12.16 Golang GO 1.12.17 Golang GO 1.13 Golang GO 1.13.1 Golang GO 1.13.2 Golang GO 1.13.3 Golang GO 1.13.4 Golang GO 1.13.5 Golang GO 1.13.6 Golang GO 1.13.7 Golang GO 1.13.8 Golang GO 1.13.9 Golang GO 1.13.10 Golang GO 1.13.11 Golang GO 1.13.13 Golang GO 1.13.15 Golang GO 1.14 Golang GO 1.14.0 Golang GO 1.14.1 Golang GO 1.14.2 Golang GO 1.14.3 Golang GO 1.14.5 Golang GO 1.14.7 Golang GO 1.14.8 Golang GO 1.14.12 Golang GO 1.14.14 Golang GO 1.15 Golang GO 1.15.1 Golang GO 1.15.2 Golang GO 1.15.3 Golang GO 1.15.4 Golang GO 1.15.5 Golang GO 1.15.6 Golang GO 1.15.7 Golang GO 1.15.8 Golang GO 1.15.9 Golang GO 1.15.10 Golang GO 1.15.11 Golang GO 1.15.12 Golang GO 1.15.13 Golang GO 1.16.0 Golang GO 1.16.1 Golang GO 1.16.2 Golang GO 1.16.3 Golang GO 1.16.4 Golang GO 1.16.5 Golang GO 1.16.6 Golang GO 1.16.7 Golang GO 1.16.8 Golang GO 1.16.9 Golang GO 1.16.10 Golang GO 1.16.11 Golang GO 1.16.12 Golang GO 1.16.13 Golang GO 1.16.14 Golang GO 1.16.15 Golang GO 1.17 Golang GO 1.17.0 Golang GO 1.17.1 Golang GO 1.17.2 Golang GO 1.17.3 Golang GO 1.17.4 Golang GO 1.17.5 Golang GO 1.17.6 Golang GO 1.17.7 Golang GO 1.17.8 Golang GO 1.17.9 Golang GO 1.18.0 Golang GO 1.18.1	235
Application	Netapp Netapp Cloud Insights Telegraf Agent -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References