go vulnerabilities (SUSE)
17 vulnerabilities.
-
goSUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
goSUSE Arbitrary code execution during build via line directives in cmd/go 8.1 High -
goSUSE Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
goSUSE Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
goSUSE Improper handling of special tags within script contexts in html/template 6.1 Medium -
goSUSE Arbitrary code execution via go.mod toolchain directive in cmd/go 9.8 Critical -
goSUSE Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
goSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
goSUSE runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... 8.6 High -
goSUSE Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which... 8.2 High -
goSUSE The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... 5.9 Medium -
goSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... 6.8 Medium -
goSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... 7.5 High -
goSUSE The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not... 8.8 High -
goSUSE Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"... 7.8 High -
goSUSE A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in... 5.9 Medium -
goSUSE The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18... 8.1 High