vulnerability
FreeBSD: VID-4ea1082a-1259-11ec-b4fa-dd5a552bdd17 (CVE-2021-39293): go -- archive/zip: overflow in preallocation check can cause OOM panic
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Sep 10, 2021 | Nov 4, 2022 | Dec 10, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Sep 10, 2021
Added
Nov 4, 2022
Modified
Dec 10, 2025
Description
The Go project reports: An oversight in the previous fix still allows for an OOM panic when the indicated directory size in the archive header is so large that subtracting it from the archive size overflows a uint64, effectively bypassing the check that the number of files in the archive is reasonable.
Solution
freebsd-upgrade-package-go
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.