CVE-2020-28362
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
7.5 HighFix available
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.86%Up 2.3 points since Apr 14, 2021
What each source reports
NVD Score used
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE List No score
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
CVE-2020-28362- Updated
- 2026-11-02
EUVDEUVD-2020-20822 No score
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
EUVD-2020-20822- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gff4-9rfx-4pcw No score
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
GHSA-gff4-9rfx-4pcw- Weakness
- CWE-295
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-28362
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
ALPINE-CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-79068
CVE-2020-28362 affecting package golang 1.25.7-1
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
AZL-79068- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 27 moreShow less
OSVAZL-98991
CVE-2020-28362 affecting package golang 1.27.1-1
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
AZL-98991- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2020-28362
CVE-2020-28362 does not affect BellSoft software
- Record
BELL-CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-28362
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
DEBIAN-CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHBA-2021:0482
Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 2.0.2 RPMs
- Record
RHBA-2021:0482- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5333
Red Hat Security Advisory: go-toolset-1.14-golang security update
- Record
RHSA-2020:5333- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5493
Red Hat Security Advisory: go-toolset:rhel8 security update
- Record
RHSA-2020:5493- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5634
Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update
- Record
RHSA-2020:5634- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0038
Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update
- Record
RHSA-2021:0038- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0145
Red Hat Security Advisory: Red Hat OpenShift Serverless Client kn 1.12.0
- Record
RHSA-2021:0145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0172
Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update
- Record
RHSA-2021:0172- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0706
Red Hat Security Advisory: container-tools:2.0 security update
- Record
RHSA-2021:0706- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0956
Red Hat Security Advisory: OpenShift Container Platform 4.6.23 security update
- Record
RHSA-2021:0956- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:1366
Red Hat Security Advisory: OpenShift Container Platform 4.7.9 packages and security update
- Record
RHSA-2021:1366- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:1551
Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update
- Record
RHSA-2021:1551- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2042
Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.7 RPM security, bug fix, and enhancement update
- Record
RHSA-2021:2042- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-28362
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
UBUNTU-CVE-2020-28362- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2021:0706 No score
Important: container-tools:2.0 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
- podman: container users permissions are not respected in privileged containers (CVE-2021-20188)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2021:0706- Updated
- 2026-11-02
OSVBIT-golang-2020-28362 No score
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- Record
BIT-golang-2020-28362- Updated
- 2026-11-02
OSVGO-2021-0069 No score
Panic during division of very large numbers in math/big
A number of math/big.Int methods can panic when provided large inputs due to a flawed division method.
- Record
GO-2021-0069- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2047-1 No score
Security update for go1.14
This update for go1.14 fixes the following issues:
- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
- go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
- go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
- go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
- go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo
- go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
- go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'
- go#41913 net/http: request.Clone doesn't deep copy TransferEncoding
- go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
- go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:2047-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2067-1 No score
Security update for go1.14
This update for go1.14 fixes the following issues:
- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
- go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
- go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
- go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
- go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo
- go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
- go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'
- go#41913 net/http: request.Clone doesn't deep copy TransferEncoding
- go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
- go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:2067-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2139-1 No score
Security update for go1.15
This update for go1.15 fixes the following issues:
- go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
- go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
- go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
- go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
- go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
- go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
- go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
- go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
- go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
- go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
- go#41463 compress/flate: deflatefast produces corrupted output
- go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
- go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file
- Record
openSUSE-SU-2020:2139-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10807-1 No score
go1.14-1.14.15-1.6 on GA media
These are all security issues fixed in the go1.14-1.14.15-1.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10807-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10808-1 No score
go1.15-1.15.15-1.2 on GA media
These are all security issues fixed in the go1.15-1.15.15-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10808-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3368-1 No score
Security update for go1.15
This update for go1.15 fixes the following issues:
- go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
- go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
- go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
- go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
- go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
- go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
- go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
- go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
- go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
- go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
- go#41463 compress/flate: deflatefast produces corrupted output
- go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
- go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file
- Record
SUSE-SU-2020:3368-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3369-1 No score
Security update for go1.14
This update for go1.14 fixes the following issues:
- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
- go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
- go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
- go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
- go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo
- go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
- go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'
- go#41913 net/http: request.Clone doesn't deep copy TransferEncoding
- go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
- go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
- Record
SUSE-SU-2020:3369-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
goAlpine:v3.13 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.14 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.15 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.16 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.17 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.18 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.19 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.20 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.21 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.22 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
Show 173 moreShow less
| Package | Affected | Fixed |
|---|---|---|
goAlpine:v3.23 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
goAlpine:v3.24 |
1.15 up to 1.15.5-r0 | 1.15.5-r0 |
cockpit-podmanAlmaLinux:8 From an advisory covering 2 CVEs |
before 11-1.module_el8.5.0+108+00865455 | 11-1.module_el8.5.0+108+00865455 |
cockpit-podmanAlmaLinux:8 From an advisory covering 2 CVEs |
before 11-1.module_el8.5.0+2635+e4386a39 | 11-1.module_el8.5.0+2635+e4386a39 |
conmonAlmaLinux:8 From an advisory covering 2 CVEs |
before 2:2.0.15-1.module_el8.5.0+108+00865455 | 2:2.0.15-1.module_el8.5.0+108+00865455 |
conmonAlmaLinux:8 From an advisory covering 2 CVEs |
before 2:2.0.15-1.module_el8.5.0+2635+e4386a39 | 2:2.0.15-1.module_el8.5.0+2635+e4386a39 |
container-selinuxAlmaLinux:8 From an advisory covering 2 CVEs |
before 2:2.130.0-1.module_el8.5.0+2635+e4386a39 | 2:2.130.0-1.module_el8.5.0+2635+e4386a39 |
container-selinuxAlmaLinux:8 From an advisory covering 2 CVEs |
before 2:2.130.0-1.module_el8.5.0+108+00865455 | 2:2.130.0-1.module_el8.5.0+108+00865455 |
containernetworking-pluginsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.8.3-4.module_el8.5.0+2635+e4386a39 | 0.8.3-4.module_el8.5.0+2635+e4386a39 |
containernetworking-pluginsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.8.3-4.module_el8.5.0+108+00865455 | 0.8.3-4.module_el8.5.0+108+00865455 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+108+00865455 | 1:0.1.41-4.module_el8.5.0+108+00865455 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 |
critAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.3.0+2044+12421f43 | 3.12-9.module_el8.3.0+2044+12421f43 |
critAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.4.0+2496+12421f43 | 3.12-9.module_el8.4.0+2496+12421f43 |
critAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.5.0+119+9a9ec082 | 3.12-9.module_el8.5.0+119+9a9ec082 |
criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.4.0+2496+12421f43 | 3.12-9.module_el8.4.0+2496+12421f43 |
criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.3.0+2044+12421f43 | 3.12-9.module_el8.3.0+2044+12421f43 |
criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.5.0+119+9a9ec082 | 3.12-9.module_el8.5.0+119+9a9ec082 |
fuse-overlayfsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.7.8-1.module_el8.5.0+108+00865455 | 0.7.8-1.module_el8.5.0+108+00865455 |
fuse-overlayfsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.7.8-1.module_el8.5.0+2635+e4386a39 | 0.7.8-1.module_el8.5.0+2635+e4386a39 |
python-podman-apiAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39 | 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39 |
python-podman-apiAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 | 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 |
python3-criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.3.0+2044+12421f43 | 3.12-9.module_el8.3.0+2044+12421f43 |
python3-criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.4.0+2496+12421f43 | 3.12-9.module_el8.4.0+2496+12421f43 |
python3-criuAlmaLinux:8 From an advisory covering 2 CVEs |
before 3.12-9.module_el8.5.0+119+9a9ec082 | 3.12-9.module_el8.5.0+119+9a9ec082 |
skopeoAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 |
skopeoAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+108+00865455 | 1:0.1.41-4.module_el8.5.0+108+00865455 |
skopeo-testsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+108+00865455 | 1:0.1.41-4.module_el8.5.0+108+00865455 |
skopeo-testsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 |
slirp4netnsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.4.2-3.git21fdece.module_el8.5.0+2635+e4386a39 | 0.4.2-3.git21fdece.module_el8.5.0+2635+e4386a39 |
slirp4netnsAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.4.2-3.git21fdece.module_el8.5.0+108+00865455 | 0.4.2-3.git21fdece.module_el8.5.0+108+00865455 |
toolboxAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.0.7-1.module_el8.5.0+108+00865455 | 0.0.7-1.module_el8.5.0+108+00865455 |
toolboxAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.0.7-1.module_el8.5.0+2635+e4386a39 | 0.0.7-1.module_el8.5.0+2635+e4386a39 |
udicaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.2.1-2.module_el8.5.0+108+00865455 | 0.2.1-2.module_el8.5.0+108+00865455 |
udicaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.2.1-2.module_el8.5.0+2635+e4386a39 | 0.2.1-2.module_el8.5.0+2635+e4386a39 |
golangAzure Linux:3 |
through 1.25.7-1 | None known |
golangAzure Linux:3 |
1.27.0 to 1.27.1-1 | None known |
golangBitnami |
before 1.14.12, 1.15.0 up to 1.15.5 | 1.14.121.15.5 |
golang-1.15Debian:11 |
before 1.15.5-1 | 1.15.5-1 |
stdlibGo |
1.14.0-0 up to 1.14.12, 1.15.0-0 up to 1.15.5 | 1.14.121.15.5 |
kialiRed Hat:service_mesh:2.0::el8 |
before 0:v1.24.4.redhat2-1.el8 | 0:v1.24.4.redhat2-1.el8 |
go-toolset-1.14Red Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-buildRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golangRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-binRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-docsRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-miscRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-raceRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-srcRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-golang-testsRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
go-toolset-1.14-runtimeRed Hat:devtools:2020 From an advisory covering 3 CVEs |
before 0:1.14.12-1.el7_9 | 0:1.14.12-1.el7_9 |
delveRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed | 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed |
delve-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed | 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed |
delve-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed | 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed |
go-toolsetRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golangRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-binRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-docsRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-miscRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-raceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-srcRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
golang-testsRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.12-1.module+el8.3.0+8784+380394dc | 0:1.14.12-1.module+el8.3.0+8784+380394dc |
openshiftRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 | 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 |
openshift-hyperkubeRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 | 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 |
openshiftRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 | 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 |
openshift-hyperkubeRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 | 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 |
python-rsaRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:4.7-1.el8 | 0:4.7-1.el8 |
python3-rsaRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:4.7-1.el8 | 0:4.7-1.el8 |
ignitionRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
ignition-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
ignition-debugsourceRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
ignition-validateRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
ignition-validate-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
cri-oRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 | 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 |
cri-o-debuginfoRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 | 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 |
cri-toolsRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.18.0-3.el7 | 0:1.18.0-3.el7 |
cri-tools-debuginfoRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.18.0-3.el7 | 0:1.18.0-3.el7 |
cri-oRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
cri-o-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
cri-o-debugsourceRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
cri-toolsRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-1.el8 | 0:1.20.0-1.el8 |
cri-tools-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-1.el8 | 0:1.20.0-1.el8 |
cri-tools-debugsourceRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-1.el8 | 0:1.20.0-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.6::el7 From an advisory covering 7 CVEs |
before 0:4.6.1608634578-1.el7 | 0:4.6.1608634578-1.el7 |
jenkins-2-pluginsRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:4.6.1609853716-1.el8 | 0:4.6.1609853716-1.el8 |
openshiftRed Hat:openshift:4.6::el7 From an advisory covering 7 CVEs |
before 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7 | 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7 |
openshift-clientsRed Hat:openshift:4.6::el7 From an advisory covering 7 CVEs |
before 0:4.6.0-202012172338.p0.git.3800.30af700.el7 | 0:4.6.0-202012172338.p0.git.3800.30af700.el7 |
openshift-clients-redistributableRed Hat:openshift:4.6::el7 From an advisory covering 7 CVEs |
before 0:4.6.0-202012172338.p0.git.3800.30af700.el7 | 0:4.6.0-202012172338.p0.git.3800.30af700.el7 |
openshift-hyperkubeRed Hat:openshift:4.6::el7 From an advisory covering 7 CVEs |
before 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7 | 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7 |
cri-oRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 | 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 |
cri-o-debuginfoRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 | 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 |
cri-o-debugsourceRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 | 0:1.19.1-2.rhaos4.6.git2af9ecf.el8 |
openshiftRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8 | 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8 |
openshift-clientsRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:4.6.0-202012172338.p0.git.3800.30af700.el8 | 0:4.6.0-202012172338.p0.git.3800.30af700.el8 |
openshift-clients-redistributableRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:4.6.0-202012172338.p0.git.3800.30af700.el8 | 0:4.6.0-202012172338.p0.git.3800.30af700.el8 |
openshift-hyperkubeRed Hat:openshift:4.6::el8 From an advisory covering 7 CVEs |
before 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8 | 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8 |
openshift-serverless-clientsRed Hat:serverless:1.0::el8 From an advisory covering 4 CVEs |
before 0:0.18.4-2.el8 | 0:0.18.4-2.el8 |
openshiftRed Hat:openshift:4.6::el7 From an advisory covering 4 CVEs |
before 0:4.6.0-202101160934.p0.git.94242.fc5242e.el7 | 0:4.6.0-202101160934.p0.git.94242.fc5242e.el7 |
openshift-hyperkubeRed Hat:openshift:4.6::el7 From an advisory covering 4 CVEs |
before 0:4.6.0-202101160934.p0.git.94242.fc5242e.el7 | 0:4.6.0-202101160934.p0.git.94242.fc5242e.el7 |
openshiftRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 0:4.6.0-202101160934.p0.git.94242.fc5242e.el8 | 0:4.6.0-202101160934.p0.git.94242.fc5242e.el8 |
openshift-hyperkubeRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 0:4.6.0-202101160934.p0.git.94242.fc5242e.el8 | 0:4.6.0-202101160934.p0.git.94242.fc5242e.el8 |
containers-commonRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 1:1.1.1-3.rhaos4.6.el8 | 1:1.1.1-3.rhaos4.6.el8 |
skopeoRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 1:1.1.1-3.rhaos4.6.el8 | 1:1.1.1-3.rhaos4.6.el8 |
skopeo-debuginfoRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 1:1.1.1-3.rhaos4.6.el8 | 1:1.1.1-3.rhaos4.6.el8 |
skopeo-debugsourceRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 1:1.1.1-3.rhaos4.6.el8 | 1:1.1.1-3.rhaos4.6.el8 |
skopeo-testsRed Hat:openshift:4.6::el8 From an advisory covering 4 CVEs |
before 1:1.1.1-3.rhaos4.6.el8 | 1:1.1.1-3.rhaos4.6.el8 |
buildahRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.11.6-8.module+el8.3.0+10188+4c10031c | 0:1.11.6-8.module+el8.3.0+10188+4c10031c |
buildah-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.11.6-8.module+el8.3.0+10188+4c10031c | 0:1.11.6-8.module+el8.3.0+10188+4c10031c |
buildah-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.11.6-8.module+el8.3.0+10188+4c10031c | 0:1.11.6-8.module+el8.3.0+10188+4c10031c |
buildah-testsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.11.6-8.module+el8.3.0+10188+4c10031c | 0:1.11.6-8.module+el8.3.0+10188+4c10031c |
buildah-tests-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.11.6-8.module+el8.3.0+10188+4c10031c | 0:1.11.6-8.module+el8.3.0+10188+4c10031c |
cockpit-podmanRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:11-1.module+el8.3.0+10188+4c10031c | 0:11-1.module+el8.3.0+10188+4c10031c |
conmonRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 2:2.0.15-1.module+el8.3.0+10188+4c10031c | 2:2.0.15-1.module+el8.3.0+10188+4c10031c |
container-selinuxRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 2:2.130.0-1.module+el8.3.0+10188+4c10031c | 2:2.130.0-1.module+el8.3.0+10188+4c10031c |
containernetworking-pluginsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.8.3-4.module+el8.3.0+10188+4c10031c | 0:0.8.3-4.module+el8.3.0+10188+4c10031c |
containernetworking-plugins-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.8.3-4.module+el8.3.0+10188+4c10031c | 0:0.8.3-4.module+el8.3.0+10188+4c10031c |
containernetworking-plugins-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.8.3-4.module+el8.3.0+10188+4c10031c | 0:0.8.3-4.module+el8.3.0+10188+4c10031c |
containers-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:0.1.41-4.module+el8.3.0+10188+4c10031c | 1:0.1.41-4.module+el8.3.0+10188+4c10031c |
critRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:3.12-9.module+el8.3.0+10188+4c10031c | 0:3.12-9.module+el8.3.0+10188+4c10031c |
criuRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:3.12-9.module+el8.3.0+10188+4c10031c | 0:3.12-9.module+el8.3.0+10188+4c10031c |
criu-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:3.12-9.module+el8.3.0+10188+4c10031c | 0:3.12-9.module+el8.3.0+10188+4c10031c |
criu-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:3.12-9.module+el8.3.0+10188+4c10031c | 0:3.12-9.module+el8.3.0+10188+4c10031c |
fuse-overlayfsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.7.8-1.module+el8.3.0+10188+4c10031c | 0:0.7.8-1.module+el8.3.0+10188+4c10031c |
fuse-overlayfs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.7.8-1.module+el8.3.0+10188+4c10031c | 0:0.7.8-1.module+el8.3.0+10188+4c10031c |
fuse-overlayfs-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.7.8-1.module+el8.3.0+10188+4c10031c | 0:0.7.8-1.module+el8.3.0+10188+4c10031c |
podmanRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-dockerRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-remoteRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-remote-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
podman-testsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.6.4-26.module+el8.3.0+10188+4c10031c | 0:1.6.4-26.module+el8.3.0+10188+4c10031c |
python-podman-apiRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+10188+4c10031c | 0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+10188+4c10031c |
python3-criuRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:3.12-9.module+el8.3.0+10188+4c10031c | 0:3.12-9.module+el8.3.0+10188+4c10031c |
runcRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c | 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c |
runc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c | 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c |
runc-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c | 0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c |
skopeoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:0.1.41-4.module+el8.3.0+10188+4c10031c | 1:0.1.41-4.module+el8.3.0+10188+4c10031c |
skopeo-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:0.1.41-4.module+el8.3.0+10188+4c10031c | 1:0.1.41-4.module+el8.3.0+10188+4c10031c |
skopeo-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:0.1.41-4.module+el8.3.0+10188+4c10031c | 1:0.1.41-4.module+el8.3.0+10188+4c10031c |
skopeo-testsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:0.1.41-4.module+el8.3.0+10188+4c10031c | 1:0.1.41-4.module+el8.3.0+10188+4c10031c |
slirp4netnsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c | 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c |
slirp4netns-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c | 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c |
slirp4netns-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c | 0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c |
toolboxRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.0.7-1.module+el8.3.0+10188+4c10031c | 0:0.0.7-1.module+el8.3.0+10188+4c10031c |
udicaRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.2.1-2.module+el8.3.0+10188+4c10031c | 0:0.2.1-2.module+el8.3.0+10188+4c10031c |
openshift-eventrouterRed Hat:openshift:4.6::el8 From an advisory covering 3 CVEs |
before 0:0.2-6.git7c289cc.el8 | 0:0.2-6.git7c289cc.el8 |
openshift-eventrouter-debuginfoRed Hat:openshift:4.6::el8 From an advisory covering 3 CVEs |
before 0:0.2-6.git7c289cc.el8 | 0:0.2-6.git7c289cc.el8 |
openshift-eventrouter-debugsourceRed Hat:openshift:4.6::el8 From an advisory covering 3 CVEs |
before 0:0.2-6.git7c289cc.el8 | 0:0.2-6.git7c289cc.el8 |
golang-github-prometheus-promuRed Hat:openshift:4.7::el8 From an advisory covering 4 CVEs |
before 0:0.5.0-3.git642a960.el8 | 0:0.5.0-3.git642a960.el8 |
prometheus-promuRed Hat:openshift:4.7::el8 From an advisory covering 4 CVEs |
before 0:0.5.0-3.git642a960.el8 | 0:0.5.0-3.git642a960.el8 |
cri-toolsRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.20.0-2.el7 | 0:1.20.0-2.el7 |
cri-tools-debuginfoRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.20.0-2.el7 | 0:1.20.0-2.el7 |
runcRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.0.0-95.rhaos4.8.gitcd80260.el7 | 0:1.0.0-95.rhaos4.8.gitcd80260.el7 |
runc-debuginfoRed Hat:openshift:4.7::el7 From an advisory covering 6 CVEs |
before 0:1.0.0-95.rhaos4.8.gitcd80260.el7 | 0:1.0.0-95.rhaos4.8.gitcd80260.el7 |
cri-toolsRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-2.el8 | 0:1.20.0-2.el8 |
cri-tools-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-2.el8 | 0:1.20.0-2.el8 |
cri-tools-debugsourceRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.20.0-2.el8 | 0:1.20.0-2.el8 |
runcRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.0.0-95.rhaos4.8.gitcd80260.el8 | 0:1.0.0-95.rhaos4.8.gitcd80260.el8 |
runc-debuginfoRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.0.0-95.rhaos4.8.gitcd80260.el8 | 0:1.0.0-95.rhaos4.8.gitcd80260.el8 |
runc-debugsourceRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:1.0.0-95.rhaos4.8.gitcd80260.el8 | 0:1.0.0-95.rhaos4.8.gitcd80260.el8 |
jenkinsRed Hat:openshift:4.7::el8 From an advisory covering 6 CVEs |
before 0:2.277.3.1620393611-1.el8 | 0:2.277.3.1620393611-1.el8 |
mcgRed Hat:openshift_container_storage:4.7::el8 From an advisory covering 2 CVEs |
before 0:5.7.0-69.85e2026.5.7.el8 | 0:5.7.0-69.85e2026.5.7.el8 |
go1.15SUSE:Linux Enterprise Module for Development Tools 15 SP1 From an advisory covering 3 CVEs |
before 1.15.5-1.11.1 | 1.15.5-1.11.1 |
go1.15SUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 3 CVEs |
before 1.15.5-1.11.1 | 1.15.5-1.11.1 |
go1.14SUSE:Linux Enterprise Module for Development Tools 15 SP1 From an advisory covering 3 CVEs |
before 1.14.12-1.26.1 | 1.14.12-1.26.1 |
go1.14SUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 3 CVEs |
before 1.14.12-1.26.1 | 1.14.12-1.26.1 |
golang-1.14Ubuntu:20.04:LTS |
All versions, plus listed versions 1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1 Show 4 moreShow less1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2 |
None known |
go1.14openSUSE:Leap 15.1 From an advisory covering 3 CVEs |
before 1.14.12-lp151.22.1 | 1.14.12-lp151.22.1 |
go1.14openSUSE:Leap 15.2 From an advisory covering 3 CVEs |
before 1.14.12-lp152.2.12.1 | 1.14.12-lp152.2.12.1 |
go1.15openSUSE:Leap 15.2 From an advisory covering 3 CVEs |
before 1.15.5-lp152.2.1 | 1.15.5-lp152.2.1 |
go1.14openSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 1.14.15-1.6 | 1.14.15-1.6 |
go1.15openSUSE:Tumbleweed From an advisory covering 14 CVEs |
before 1.15.15-1.2 | 1.15.15-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-28362 is a high vulnerability (CVSS 7.5) in Golang Go, published November 18, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.86%, the 90th percentile. Fixed in go 1.15.5-r0.
References
lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E
groups.google.com/g/golang-nuts/c/c-ssaaS7RMI
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO
security.netapp.com/advisory/ntap-20201202-0004
arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-28362
github.com/advisories/GHSA-gff4-9rfx-4pcw
security.alpinelinux.org/vuln/CVE-2020-28362
access.redhat.com/errata/RHSA-2021:0706
bugzilla.redhat.com/1915734
errata.almalinux.org/8/ALSA-2021-0706.html
vulners.com/cve/CVE-2021-20188
redhat.com/security/data/cve/CVE-2020-28362.html
docs.bell-sw.com/security/cves/CVE-2020-28362
security-tracker.debian.org/tracker/CVE-2020-28362
go.dev/cl/269657
go.googlesource.com/go/+/1e1fa5903b760c6714ba17e50bf850b01f49135c
issues.redhat.com/browse/MAISTRA-2086
security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_0482.json
cve.org/CVERecord?id=CVE-2020-28362
redteam-pentesting.de/en/advisories/rt-sa-2020-004/-inconsistent-behavior-of-gos-cgi-and-fastcgi-transport-may-lead-to-cross-site-scripting
openwall.com/lists/oss-security/2020/10/15/1
jenkins.io/security/advisory/2020-11-04
snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515
suse.com/support/update/announcement/2020/suse-su-20203368-1
bugzilla.suse.com/1175132
ubuntu.com/security/CVE-2020-28362
lists.opensuse.org/archives/list/[email protected]/thread/E2QCSRQATMLK7WM4IWLILC7IQJFW7PVI
This page doesn't list everything
Left out here: 1 reference. The JSON record has them.