golang-docs vulnerabilities (Red Hat)
160 vulnerabilities.
golang-docsRed HatStack exhaustion on crafted paths in path/filepath7.5 Highgolang-docsRed HatStack exhaustion when reading certain archives in compress/gzip7.5 Highgolang-docsRed HatStack exhaustion in Glob on certain paths in io/fs7.5 Highgolang-docsRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgolang-docsRed HatStack exhaustion due to deeply nested types in go/parser5.5 Mediumgolang-docsRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgolang-docsRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 Lowgolang-docsRed Hatgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumgolang-docsRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 Highgolang-docsRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 Highgolang-docsRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-docsRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highgolang-docsRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-docsRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Criticalgolang-docsRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Mediumgolang-docsRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highgolang-docsRed HatGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 Highgolang-docsRed HatImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 Highgolang-docsRed HatGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-docsRed HatIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 Highgolang-docsRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-docsRed HatGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 Highgolang-docsRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumgolang-docsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 Highgolang-docsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 Mediumgolang-docsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 Highgolang-docsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 Highgolang-docsRed Hatgolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 Mediumgolang-docsRed Hatencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 Highgolang-docsRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgolang-docsRed HatGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 Highgolang-docsRed HatGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 Highgolang-docsRed HatArbitrary code execution via the go command with cgo in cmd/go7.5 Highgolang-docsRed HatArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 Highgolang-docsRed HatGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 Mediumgolang-docsRed HatWithdrawn Advisory: Infinite loop in xz7.5 Highgolang-docsRed HatGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumgolang-docsRed Hatgolang.org/x/text Infinite loop7.5 Highgolang-docsRed HatThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 Criticalgolang-docsRed HatGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 Highgolang-docsRed HatGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 Highgolang-docsRed Hatnet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 Criticalgolang-docsRed HatSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highgolang-docsRed HatSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highgolang-docsRed HatAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 Mediumgolang-docsRed HatGo before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"...7.8 Highgolang-docsRed HatThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 Criticalgolang-docsRed HatThe net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP...9.8 Criticalgolang-docsRed HatAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 Mediumgolang-docsRed HatGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...9.8 Critical- Show moreLoading…