Fix DoS in qax-os/excelize due to invalid shared string table index validation

Vulnerability Overview This vulnerability involves insufficient validation of shared string table indices during Excel file parsing. Attackers can trigger a by constructing malicious Excel files, leading to a Denial of Service (DoS) attack. Affected Scope Affected Component: The library Specific Impact: - When parsing Excel files containing invalid shared string table indices, the program triggers a , causing service unavailability. - This vulnerability affects multiple functions, including , , and . Remediation 1. Input Validation: Add validity checks for shared string table indices within the function to ensure indices are within valid ranges. 2. Error Handling: Introduce and functions to handle errors related to invalid shared string table indices and slicer names. 3. Update Test Cases: Add corresponding test cases in and to ensure the patched code correctly handles invalid input. Proof of Concept (PoC) Code ```go // cell_test.go func TestGetValueFrom(t testing.T) { value, err := c.getValueFrom(f, &xlsxSST{Count: 1, SI: []xlsxSI{{Val: "a"}}}, false) NoError(t, err) Equal(t, "a", value) c = xlsxF{"s", V: "1"} value, err = c.getValueFrom(f, &xlsxSST{Count: 1, SI: []xlsxSI{{}}, f: &xlsxF{Val: "a"}}, false) assert.Equal(t, newInvalidSharedStringIndex(-1), err) assert.Empty(t, value) } // rows_test.go func TestSetRows(t testing.T) { f := NewFile() f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 1}, &[]interface{}{"a", "b", "c"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 2}, &[]interface{}{"d", "e", "f"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 3}, &[]interface{}{"g", "h", "i"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 4}, &[]interface{}{"j", "k", "l"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 5}, &[]interface{}{"m", "n", "o"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 6}, &[]interface{}{"p", "q", "r"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 7}, &[]interface{}{"s", "t", "u"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 8}, &[]interface{}{"v", "w", "x"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 9}, &[]interface{}{"y", "z", "aa"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 10}, &[]interface{}{"ab", "ac", "ad"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 11}, &[]interface{}{"ae", "af", "ag"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 12}, &[]interface{}{"ah", "ai", "aj"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 13}, &[]interface{}{"ak", "al", "am"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 14}, &[]interface{}{"an", "ao", "ap"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 15}, &[]interface{}{"aq", "ar", "as"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 16}, &[]interface{}{"at", "au", "av"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 17}, &[]interface{}{"aw", "ax", "ay"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 18}, &[]interface{}{"az", "ba", "bb"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 19}, &[]interface{}{"bc", "bd", "be"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 20}, &[]interface{}{"bf", "bg", "bh"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 21}, &[]interface{}{"bi", "bj", "bk"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 22}, &[]interface{}{"bl", "bm", "bn"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 23}, &[]interface{}{"bo", "bp", "bq"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 24}, &[]interface{}{"br", "bs", "bt"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 25}, &[]interface{}{"bu", "bv", "bw"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 26}, &[]interface{}{"bx", "by", "bz"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 27}, &[]interface{}{"ca", "cb", "cc"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 28}, &[]interface{}{"cd", "ce", "cf"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 29}, &[]interface{}{"cg", "ch", "ci"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 30}, &[]interface{}{"cj", "ck", "cl"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 31}, &[]interface{}{"cm", "cn", "co"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 32}, &[]interface{}{"cp", "cq", "cr"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 33}, &[]interface{}{"cs", "ct", "cu"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 34}, &[]interface{}{"cv", "cw", "cx"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 35}, &[]interface{}{"cy", "cz", "da"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 36}, &[]interface{}{"db", "dc", "dd"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 37}, &[]interface{}{"de", "df", "dg"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 38}, &[]interface{}{"dh", "di", "dj"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 39}, &[]interface{}{"dk", "dl", "dm"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 40}, &[]interface{}{"dn", "do", "dp"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 41}, &[]interface{}{"dq", "dr", "ds"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 42}, &[]interface{}{"dt", "du", "dv"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 43}, &[]interface{}{"dw", "dx", "dy"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 44}, &[]interface{}{"dz", "ea", "eb"}) f.SetSheetRow("Sheet1", &Cell{Col: 1, Row: 45}, &[]interfac

Goal Reached Thanks to every supporter — we hit 100%!

Fix DoS in qax-os/excelize due to invalid shared string table index validation

More from this source