msft-golang vulnerabilities (Azure Linux)
44 vulnerabilities.
-
msft-golangAzure Linux URLs in meta content attribute actions are not escaped in html/template 6.1 Medium -
msft-golangAzure Linux Potential code smuggling via doc comments in cmd/cgo 8.6 High -
msft-golangAzure Linux Unexpected session resumption in crypto/tls 10.0 Critical -
msft-golangAzure Linux Unexpected code execution when invoking toolchain in cmd/go 7.0 High -
msft-golangAzure Linux Handshake messages may be processed at the incorrect encryption level in crypto/tls 5.3 Medium -
msft-golangAzure Linux Memory exhaustion in query parameter parsing in net/url 7.5 High -
msft-golangAzure Linux Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
msft-golangAzure Linux Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
msft-golangAzure Linux Excessive CPU consumption in Reader.ReadResponse in net/textproto 5.3 Medium -
msft-golangAzure Linux Panic when validating certificates with DSA public keys in crypto/x509 7.5 High -
msft-golangAzure Linux Lack of limit when parsing cookies can cause memory exhaustion in net/http 5.3 Medium -
msft-golangAzure Linux Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
msft-golangAzure Linux Usage of ExtKeyUsageAny disables policy validation in crypto/x509 7.5 High -
msft-golangAzure Linux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
msft-golangAzure Linux Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 6.1 Medium -
msft-golangAzure Linux Sensitive headers incorrectly sent after cross-domain redirect in net/http 6.1 Medium -
msft-golangAzure Linux Output of "go env" does not sanitize values in cmd/go 9.8 Critical -
msft-golangAzure Linux Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
msft-golangAzure Linux Mishandling of corrupt central directory record in archive/zip 5.5 Medium -
msft-golangAzure Linux Arbitrary code execution during build on Darwin in cmd/go 6.4 Medium -
msft-golangAzure Linux Malformed DNS message can cause infinite loop in net 5.9 Medium -
msft-golangAzure Linux Command 'go get' may unexpectedly fallback to insecure git in cmd/go 7.5 High -
msft-golangAzure Linux Denial of service via chunk extensions in net/http 5.3 Medium -
msft-golangAzure Linux Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel 7.5 High -
msft-golangAzure Linux Insecure parsing of Windows paths with a \??\ prefix in path/filepath 7.5 High -
msft-golangAzure Linux Improper handling of special tags within script contexts in html/template 6.1 Medium -
msft-golangAzure Linux Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
msft-golangAzure Linux libp2p nodes vulnerable to attack using large RSA keys 7.5 High -
msft-golangAzure Linux Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
msft-golangAzure Linux Insufficient sanitization of Host header in net/http 6.5 Medium -
msft-golangAzure Linux Code injection via go command with cgo in cmd/go 9.8 Critical -
msft-golangAzure Linux Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
msft-golangAzure Linux Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
msft-golangAzure Linux Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
msft-golangAzure Linux Improper handling of empty HTML attributes in html/template 7.3 High -
msft-golangAzure Linux Improper handling of JavaScript whitespace in html/template 9.8 Critical -
msft-golangAzure Linux Improper sanitization of CSS values in html/template 7.3 High -
msft-golangAzure Linux Backticks not treated as string delimiters in html/template 9.8 Critical -
msft-golangAzure Linux Infinite loop in parsing in go/scanner 7.5 High -
msft-golangAzure Linux Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
msft-golangAzure Linux Excessive memory allocation in net/http and net/textproto 7.5 High -
msft-golangAzure Linux Excessive resource consumption in mime/multipart 7.5 High -
msft-golangAzure Linux Panic on large handshake records in crypto/tls 7.5 High -
msft-golangAzure Linux Path traversal on Windows in path/filepath 7.5 High