PT-2018-14220 · Google · X/Net/Html

Tr3Ee

·

Published

2018-10-01

·

Updated

2023-09-09

·

CVE-2018-17848

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions html package (aka x/net/html) versions through 2018-09-25
Description The issue arises from the html package mishandling certain HTML tags, such as <math><template><mn><b></template> and <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) during an html.Parse call. This error occurs in functions like (*insertionModeStack).pop in node.go and (*nodeStack).pop in node.go. The html.Parse function can panic on some invalid inputs.
Recommendations For versions through 2018-09-25, consider avoiding the use of the html.Parse function with potentially malformed HTML inputs until a fix is available. As a temporary workaround, validate and sanitize HTML inputs before passing them to the html.Parse function to minimize the risk of panic. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Improper Validation of Array Index

Weakness Enumeration

Related Identifiers

CVE-2018-17848
GHSA-4R78-HX75-JJJ2
GHSA-MV93-WVCP-7M7R
GO-2022-0197

Affected Products

X/Net/Html