Debian/golang-github-google-go-attestation: unknown
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor bytes before reading entrie
Action: Upgrade golang-github-google-go-attestation to 0.6.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.1-1 | - |
Fixed versions
| 0.6.1-1 |
Sources
published · modified · JSON