golang-race vulnerabilities (AlmaLinux)
93 vulnerabilities.
golang-raceAlmaLinuxArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgolang-raceAlmaLinuxExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgolang-raceAlmaLinuxMemory exhaustion in query parameter parsing in net/url7.5 Highgolang-raceAlmaLinuxExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgolang-raceAlmaLinuxUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgolang-raceAlmaLinuxUnexpected paths returned from LookPath in os/exec6.5 Mediumgolang-raceAlmaLinuxUnexpected command execution in untrusted VCS repositories in cmd/go8.6 Highgolang-raceAlmaLinuxSensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumgolang-raceAlmaLinuxRequest smuggling due to acceptance of invalid chunked data in net/http9.1 Criticalgolang-raceAlmaLinuxStack exhaustion in Decoder.Decode in encoding/gob7.5 Highgolang-raceAlmaLinuxHTTP/2 rapid reset can cause excessive work in net/http7.5 Highgolang-raceAlmaLinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-raceAlmaLinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highgolang-raceAlmaLinuxCode injection via go command with cgo in cmd/go9.8 Criticalgolang-raceAlmaLinuxUnsafe behavior in setuid/setgid binaries in runtime7.8 Highgolang-raceAlmaLinuxImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 Criticalgolang-raceAlmaLinuxImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 Criticalgolang-raceAlmaLinuxImproper handling of JavaScript whitespace in html/template9.8 Criticalgolang-raceAlmaLinuxExcessive resource consumption in mime/multipart7.5 Highgolang-raceAlmaLinuxPanic on large handshake records in crypto/tls7.5 Highgolang-raceAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highgolang-raceAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-raceAlmaLinuxUnbounded memory consumption when reading headers in archive/tar7.5 Highgolang-raceAlmaLinuxExposure of client IP addresses in net/http6.5 Mediumgolang-raceAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 Highgolang-raceAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highgolang-raceAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 Highgolang-raceAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 Highgolang-raceAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 Highgolang-raceAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgolang-raceAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 Mediumgolang-raceAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgolang-raceAlmaLinuxcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highgolang-raceAlmaLinuxRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-raceAlmaLinuxCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Criticalgolang-raceAlmaLinuxGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Mediumgolang-raceAlmaLinuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highgolang-raceAlmaLinuxGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 Highgolang-raceAlmaLinuxImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 Highgolang-raceAlmaLinuxGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-raceAlmaLinuxIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 Highgolang-raceAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 Highgolang-raceAlmaLinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical