mcg vulnerabilities (Red Hat)
17 vulnerabilities.
-
mcgRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
mcgRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
mcgRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
mcgRed Hat x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
mcgRed Hat Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file... 4.8 Medium -
mcgRed Hat golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
mcgRed Hat Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
mcgRed Hat The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... 6.5 Medium -
mcgRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2). 7.5 High -
mcgRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary. 5.3 Medium -
mcgRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. 7.3 High -
mcgRed Hat Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 4.7 Medium -
mcgRed Hat Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 7.5 High -
mcgRed Hat Authorization bypass in github.com/dgrijalva/jwt-go 7.5 High -
mcgRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
mcgRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
mcgRed Hat golang.org/x/text Infinite loop 7.5 High