golang vulnerabilities (Azure Linux)
205 vulnerabilities.
golangAzure LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangAzure LinuxIndefinite hang with large buffers on Windows in crypto/rand7.5 HighgolangAzure LinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangAzure LinuxEmpty Cmd.Path can trigger unintended binary in os/exec on Windows7.8 HighgolangAzure LinuxPath traversal via Clean on Windows in path/filepath7.5 HighgolangAzure Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangAzure LinuxThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangAzure LinuxCertificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when...7.5 HighgolangAzure Linuxencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangAzure Linuxregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighgolangAzure Linuxcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighgolangAzure LinuxRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighgolangAzure LinuxCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalgolangAzure Linuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgolangAzure LinuxGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighgolangAzure LinuxImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgolangAzure LinuxGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgolangAzure LinuxGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighgolangAzure LinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgolangAzure LinuxGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgolangAzure LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgolangAzure LinuxGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgolangAzure Linuxencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 HighgolangAzure LinuxIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgolangAzure LinuxAuthentication Bypass in github.com/russellhaering/gosaml29.8 CriticalgolangAzure LinuxThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 CriticalgolangAzure LinuxGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighgolangAzure LinuxGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 MediumgolangAzure LinuxWithdrawn Advisory: Infinite loop in xz7.5 HighgolangAzure LinuxIn Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the...5.3 MediumgolangAzure LinuxGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 MediumgolangAzure LinuxThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 CriticalgolangAzure LinuxGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 HighgolangAzure Linuxnet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 CriticalgolangAzure LinuxGo through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.7.8 HighgolangAzure LinuxGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 HighgolangAzure LinuxThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...5.9 MediumgolangAzure LinuxAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 MediumgolangAzure LinuxThe net/http package's Request.ParseMultipartForm method starts writing to temporary files once...7.5 HighgolangAzure LinuxOn Darwin, user's trust preferences for root certificates were not honored. If the user had a...7.5 HighgolangAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 CriticalgolangAzure LinuxThe net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18...8.1 HighgolangAzure LinuxThe Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not...7.5 High