CVE-2022-24675 PoC — Google Go 安全漏洞

Source

https://github.com/jfrog/jfrog-CVE-2022-24675

Associated Vulnerability

Title:Google Go 安全漏洞 (CVE-2022-24675)
Description:encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Readme

# CVE-2022-24675 tools

## Usage instructions

```
cve2022_24675.sh root_folder
```

Will recursively walk the specified folder and report Golang binaries which use `pem.Decode` function, or are stripped (in which case function name will be missed and the check will not be effective).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →