golang vulnerabilities (Azure Linux)
205 vulnerabilities.
golangAzure LinuxComments in display names are incorrectly handled in net/mail7.5 HighgolangAzure LinuxIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumgolangAzure LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumgolangAzure LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumgolangAzure LinuxCommand 'go get' may unexpectedly fallback to insecure git in cmd/go7.5 HighgolangAzure LinuxDenial of service via chunk extensions in net/http5.3 MediumgolangAzure LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighgolangAzure LinuxPossible private key restoration in go package github.com/ecies/go4.9 MediumgolangAzure LinuxIncorrect detection of reserved device names on Windows in path/filepath5.3 MediumgolangAzure LinuxInsecure parsing of Windows paths with a \??\ prefix in path/filepath7.5 HighgolangAzure LinuxHTTP/2 rapid reset can cause excessive work in net/http7.5 HighgolangAzure LinuxArbitrary code execution during build via line directives in cmd/go8.1 HighgolangAzure LinuxImproper handling of special tags within script contexts in html/template6.1 MediumgolangAzure LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumgolangAzure Linuxlibp2p nodes vulnerable to attack using large RSA keys7.5 HighgolangAzure LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumgolangAzure LinuxInsufficient sanitization of Host header in net/http6.5 MediumgolangAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighgolangAzure LinuxCode injection via go command with cgo in cmd/go9.8 CriticalgolangAzure LinuxUnsafe behavior in setuid/setgid binaries in runtime7.8 HighgolangAzure LinuxImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 CriticalgolangAzure LinuxImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 CriticalgolangAzure LinuxImproper handling of empty HTML attributes in html/template7.3 HighgolangAzure LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalgolangAzure LinuxImproper sanitization of CSS values in html/template7.3 HighgolangAzure LinuxBackticks not treated as string delimiters in html/template9.8 CriticalgolangAzure LinuxInfinite loop in parsing in go/scanner7.5 HighgolangAzure LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighgolangAzure LinuxExcessive memory allocation in net/http and net/textproto7.5 HighgolangAzure LinuxIncorrect calculation on P256 curves in crypto/internal/nistec5.3 MediumgolangAzure LinuxExcessive resource consumption in mime/multipart7.5 HighgolangAzure LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighgolangAzure LinuxPanic on large handshake records in crypto/tls7.5 HighgolangAzure LinuxPath traversal on Windows in path/filepath7.5 HighgolangAzure LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumgolangAzure LinuxRestricted file access on Windows in os and net/http7.5 HighgolangAzure LinuxUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 HighgolangAzure LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgolangAzure LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgolangAzure LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighgolangAzure Linuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgolangAzure LinuxPanic when decoding Float and Rat types in math/big7.5 HighgolangAzure LinuxExposure of client IP addresses in net/http6.5 MediumgolangAzure LinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighgolangAzure LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgolangAzure LinuxStack exhaustion on crafted paths in path/filepath7.5 HighgolangAzure LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangAzure LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangAzure LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangAzure LinuxStack exhaustion due to deeply nested types in go/parser5.5 Medium- Show moreLoading…