Skip to content
OpenAdvisories

Package · Go

github.com/moby/sys/user

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

    The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allow…