GO-2023-1754

vendorUSosv

Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor

view advisory published 2024-08-20Licence: per source

Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-30551UShigh7.5—
Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata file…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan