golang vulnerabilities (Red Hat)
160 vulnerabilities.
golangRed HatStack exhaustion on crafted paths in path/filepath7.5 HighgolangRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangRed HatStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangRed HatStack exhaustion due to deeply nested types in go/parser5.5 MediumgolangRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangRed Hatgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighgolangRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighgolangRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighgolangRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalgolangRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumgolangRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgolangRed HatGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighgolangRed HatImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgolangRed HatGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgolangRed HatIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 HighgolangRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumgolangRed HatGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighgolangRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgolangRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighgolangRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgolangRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgolangRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgolangRed Hatgolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumgolangRed Hatencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 HighgolangRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgolangRed HatGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 HighgolangRed HatGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighgolangRed HatArbitrary code execution via the go command with cgo in cmd/go7.5 HighgolangRed HatArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 HighgolangRed HatGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 MediumgolangRed HatWithdrawn Advisory: Infinite loop in xz7.5 HighgolangRed HatGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 MediumgolangRed Hatgolang.org/x/text Infinite loop7.5 HighgolangRed HatThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 CriticalgolangRed HatGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 HighgolangRed HatGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 HighgolangRed Hatnet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 CriticalgolangRed HatSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighgolangRed HatSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighgolangRed HatAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 MediumgolangRed HatGo before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"...7.8 HighgolangRed HatThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 CriticalgolangRed HatThe net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP...9.8 CriticalgolangRed HatAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 MediumgolangRed HatGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...9.8 Critical- Show moreLoading…