golang-1.7 vulnerabilities (Debian)
20 vulnerabilities.
golang-1.7Debianregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-1.7DebianRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-1.7DebianCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Criticalgolang-1.7DebianGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Mediumgolang-1.7Debiangolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highgolang-1.7DebianImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 Highgolang-1.7DebianIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 Highgolang-1.7DebianGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-1.7DebianGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 Highgolang-1.7DebianIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgolang-1.7DebianWithdrawn Advisory: Infinite loop in xz7.5 Highgolang-1.7DebianGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumgolang-1.7DebianGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 Highgolang-1.7DebianGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 Highgolang-1.7DebianAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 Mediumgolang-1.7DebianGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 Highgolang-1.7DebianIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...6.8 Mediumgolang-1.7DebianIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...7.5 Highgolang-1.7DebianThe "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not...8.8 Highgolang-1.7DebianGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...9.8 Critical