virus logo FortiClient Vulnerability

Golang archive/zip Denial of Service Vulnerability

description-logoDescription

archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename.

affected-products-logoAffected Applications

Go Programming Language

CVE References

CVE-2021-27919

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-27919
ID 4148
Created Feb 02, 2022
Description
Updated		 Aug 01, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Golang
Patch manual
Application Go Programming Language