go-toolset vulnerabilities (Rocky Linux)
62 vulnerabilities.
-
go-toolsetRocky Linux Unexpected command execution in untrusted VCS repositories in cmd/go 8.6 High -
go-toolsetRocky Linux Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
go-toolsetRocky Linux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
go-toolsetRocky Linux Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 6.1 Medium -
go-toolsetRocky Linux Sensitive headers incorrectly sent after cross-domain redirect in net/http 6.1 Medium -
go-toolsetRocky Linux Golang-fips: golang fips zeroed buffer 6.5 Medium -
go-toolsetRocky Linux Stack exhaustion in Parse in go/build/constraint 7.5 High -
go-toolsetRocky Linux Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
go-toolsetRocky Linux Stack exhaustion in all Parse functions in go/parser 4.3 Medium -
go-toolsetRocky Linux Denial of service due to improper 100-continue handling in net/http 7.5 High -
go-toolsetRocky Linux Important: go-toolset:rhel8 security update No score -
go-toolsetRocky Linux Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
go-toolsetRocky Linux Mishandling of corrupt central directory record in archive/zip 5.5 Medium -
go-toolsetRocky Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
go-toolsetRocky Linux Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High -
go-toolsetRocky Linux HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
go-toolsetRocky Linux Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
go-toolsetRocky Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
go-toolsetRocky Linux Code injection via go command with cgo in cmd/go 9.8 Critical -
go-toolsetRocky Linux Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
go-toolsetRocky Linux Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
go-toolsetRocky Linux Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
go-toolsetRocky Linux Improper handling of JavaScript whitespace in html/template 9.8 Critical -
go-toolsetRocky Linux Excessive resource consumption in mime/multipart 7.5 High -
go-toolsetRocky Linux Panic on large handshake records in crypto/tls 7.5 High -
go-toolsetRocky Linux Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
go-toolsetRocky Linux Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
go-toolsetRocky Linux Unbounded memory consumption when reading headers in archive/tar 7.5 High -
go-toolsetRocky Linux Exposure of client IP addresses in net/http 6.5 Medium -
go-toolsetRocky Linux Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
go-toolsetRocky Linux Stack exhaustion when unmarshaling certain documents in encoding/xml 7.5 High -
go-toolsetRocky Linux Stack exhaustion on crafted paths in path/filepath 7.5 High -
go-toolsetRocky Linux Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
go-toolsetRocky Linux Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
go-toolsetRocky Linux Stack exhaustion from deeply nested XML documents in encoding/xml 7.5 High -
go-toolsetRocky Linux Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
go-toolsetRocky Linux Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
go-toolsetRocky Linux Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
go-toolsetRocky Linux golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
go-toolsetRocky Linux The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
go-toolsetRocky Linux encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
go-toolsetRocky Linux regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
go-toolsetRocky Linux cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
go-toolsetRocky Linux Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
go-toolsetRocky Linux Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
go-toolsetRocky Linux Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file... 4.8 Medium -
go-toolsetRocky Linux golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
go-toolsetRocky Linux Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted... 7.5 High -
go-toolsetRocky Linux ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17... 7.5 High -
go-toolsetRocky Linux Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function... 9.8 Critical - Show olderLoading…