golang-1.11 vulnerabilities (Debian)
20 vulnerabilities.
golang-1.11Debiangolang-1.11 - regression updateNo scoregolang-1.11Debianregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-1.11DebianCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Criticalgolang-1.11DebianGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Mediumgolang-1.11Debiangolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highgolang-1.11DebianImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 Highgolang-1.11DebianGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-1.11DebianIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 Highgolang-1.11DebianGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-1.11DebianGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 Highgolang-1.11DebianIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgolang-1.11DebianArbitrary code execution via the go command with cgo in cmd/go7.5 Highgolang-1.11DebianWithdrawn Advisory: Infinite loop in xz7.5 Highgolang-1.11DebianGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumgolang-1.11DebianHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 Highgolang-1.11DebianGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 Highgolang-1.11DebianGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 Highgolang-1.11Debiannet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 Criticalgolang-1.11DebianSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highgolang-1.11DebianSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 High