Out of bounds memory access in github.com/open-policy-agent/opa
High severity
GitHub Reviewed
Published
May 20, 2022
to the GitHub Advisory Database
•
Updated Feb 15, 2023
Description
Published by the National Vulnerability Database
May 19, 2022
Published to the GitHub Advisory Database
May 20, 2022
Reviewed
May 25, 2022
Last updated
Feb 15, 2023
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.
References