golang vulnerabilities (Rocky Linux)
104 vulnerabilities.
golangRocky LinuxDenial of service due to improper 100-continue handling in net/http7.5 HighgolangRocky LinuxImportant: go-toolset:rhel8 security updateNo scoregolangRocky LinuxUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 CriticalgolangRocky LinuxMishandling of corrupt central directory record in archive/zip5.5 MediumgolangRocky LinuxImportant: golang security updateNo scoregolangRocky LinuxHTTP/2 CONTINUATION flood in net/http7.5 HighgolangRocky LinuxGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighgolangRocky LinuxHTTP/2 rapid reset can cause excessive work in net/http7.5 HighgolangRocky LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighgolangRocky LinuxCode injection via go command with cgo in cmd/go9.8 CriticalgolangRocky LinuxUnsafe behavior in setuid/setgid binaries in runtime7.8 HighgolangRocky LinuxImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 CriticalgolangRocky LinuxImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 CriticalgolangRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalgolangRocky LinuxExcessive resource consumption in mime/multipart7.5 HighgolangRocky LinuxPanic on large handshake records in crypto/tls7.5 HighgolangRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgolangRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgolangRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighgolangRocky LinuxExposure of client IP addresses in net/http6.5 MediumgolangRocky LinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighgolangRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgolangRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 HighgolangRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumgolangRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangRocky LinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangRocky Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangRocky LinuxThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangRocky Linuxencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangRocky Linuxregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighgolangRocky Linuxcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighgolangRocky LinuxRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighgolangRocky LinuxCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalgolangRocky LinuxGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumgolangRocky Linuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgolangRocky LinuxGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighgolangRocky LinuxImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgolangRocky LinuxGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgolangRocky LinuxIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 HighgolangRocky LinuxGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumgolangRocky LinuxGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighgolangRocky LinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgolangRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighgolangRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgolangRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgolangRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgolangRocky Linuxgolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 Medium- Show moreLoading…