CVE-2022-24675 PoC — Google Go 安全漏洞

Source

https://github.com/jfrog/jfrog-CVE-2022-24675

Associated Vulnerability

Title:Google Go 安全漏洞 (CVE-2022-24675)
Description:encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Readme

# CVE-2022-24675 tools

## Usage instructions

```
cve2022_24675.sh root_folder
```

Will recursively walk the specified folder and report Golang binaries which use `pem.Decode` function, or are stripped (in which case function name will be missed and the check will not be effective).

File Snapshot


 [4.0K]  /data/pocs/a954369e252281ee6e38208a3d2cc24a247178d0
├── [ 430]  cve2022_24675.sh
├── [ 11K]  LICENSE
└── [ 285]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!