Indefinite hang with large buffers on Windows in crypto/rand

• osv-coords20 versions

  pkg:bitnami/golangpkg:rpm/opensuse/go1.17&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/go1.17&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/go1.17&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/go1.18&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/go1.18&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/go1.18&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/go1.18-openssl&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/go1.18-openssl&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/go1.17&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3pkg:rpm/suse/go1.17&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

  < 1.17.11+ 19 more

  • (no CPE)range: < 1.17.11
  • (no CPE)range: < 1.17.11-150000.1.37.1
  • (no CPE)range: < 1.17.11-150000.1.37.1
  • (no CPE)range: < 1.17.11-1.1
  • (no CPE)range: < 1.18.3-150000.1.20.1
  • (no CPE)range: < 1.18.3-150000.1.20.1
  • (no CPE)range: < 1.18.3-1.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.17.11-150000.1.37.1
  • (no CPE)range: < 1.17.11-150000.1.37.1
  • (no CPE)range: < 1.18.3-150000.1.20.1
  • (no CPE)range: < 1.18.3-150000.1.20.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
  • (no CPE)range: < 1.18.10.1-150000.1.9.1
• Go standard library/crypto/randv5

  Range: 0

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• go.dev/cl/402257mitre
• go.dev/issue/52561mitre
• go.googlesource.com/go/+/bb1f4416180511231de6d17a1f2f55c82aafc863mitre
• groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJmitre
• pkg.go.dev/vuln/GO-2022-0477mitre

No linked articles in our index yet.