golang vulnerabilities (Mageia)
165 vulnerabilities.
golangMageiaMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgolangMageiaUnbounded memory consumption when reading headers in archive/tar7.5 HighgolangMageiaFailure to strip relative path components in net/url7.5 HighgolangMageiagolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgolangMageiaPanic when decoding Float and Rat types in math/big7.5 HighgolangMageiaExposure of client IP addresses in net/http6.5 MediumgolangMageiaStack exhaustion when decoding certain messages in encoding/gob7.5 HighgolangMageiaStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgolangMageiaStack exhaustion on crafted paths in path/filepath7.5 HighgolangMageiaStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangMageiaStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangMageiaStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangMageiaStack exhaustion due to deeply nested types in go/parser5.5 MediumgolangMageiaImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangMageiaSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangMageiagolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangMageiaThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangMageiaencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangMageiaregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighgolangMageiacmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighgolangMageiaRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighgolangMageiaCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalgolangMageiaGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumgolangMageiagolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgolangMageiaGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighgolangMageiaImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgolangMageiaGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgolangMageiaIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 HighgolangMageiaGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumgolangMageiaThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgolangMageiaGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighgolangMageiaGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgolangMageiaGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgolangMageiaGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgolangMageiagolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumgolangMageiaencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 HighgolangMageiaArbitrary code execution via the go command with cgo in cmd/go7.5 HighgolangMageiaArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 HighgolangMageiaGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 MediumgolangMageiaWithdrawn Advisory: Infinite loop in xz7.5 HighgolangMageiaGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 MediumgolangMageiaHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 HighgolangMageiaGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 HighgolangMageianet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 CriticalgolangMageiaSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighgolangMageiaSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighgolangMageiaGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 HighgolangMageiaThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...5.9 MediumgolangMageiaIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...6.8 MediumgolangMageiaIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...7.5 High- Show moreLoading…