Description
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.
Published: 2022-12-26
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-7707 golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.
Github GHSA Github GHSA GHSA-ppp9-7jff-5vj2 golang.org/x/text/language Out-of-bounds Read vulnerability
Ubuntu USN Ubuntu USN USN-5873-1 Go Text vulnerabilities
History

Mon, 14 Apr 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Sun, 08 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat acm
CPEs cpe:/a:redhat:acm:2.6::el8
Vendors & Products Redhat acm

Mon, 19 Aug 2024 22:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
Vendors & Products Redhat acm

Subscriptions

Golang Text
Redhat Acm Container Native Virtualization Logging Ocp Tools Openshift
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-04-14T16:15:14.817Z

Reserved: 2021-08-11T00:00:00.000Z

Link: CVE-2021-38561

cve-icon Vulnrichment

Updated: 2024-08-04T01:44:23.541Z

cve-icon NVD

Status : Modified

Published: 2022-12-26T06:15:10.560

Modified: 2025-04-14T17:15:24.427

Link: CVE-2021-38561

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-08-12T00:00:00Z

Links: CVE-2021-38561 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses