go1.17 vulnerabilities (SUSE)
27 vulnerabilities.
-
go1.17SUSE Panic when decoding Float and Rat types in math/big 7.5 High -
go1.17SUSE Exposure of client IP addresses in net/http 6.5 Medium -
go1.17SUSE Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
go1.17SUSE Stack exhaustion when unmarshaling certain documents in encoding/xml 7.5 High -
go1.17SUSE Stack exhaustion on crafted paths in path/filepath 7.5 High -
go1.17SUSE Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
go1.17SUSE Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
go1.17SUSE Stack exhaustion from deeply nested XML documents in encoding/xml 7.5 High -
go1.17SUSE Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
go1.17SUSE Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
go1.17SUSE Indefinite hang with large buffers on Windows in crypto/rand 7.5 High -
go1.17SUSE Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
go1.17SUSE Empty Cmd.Path can trigger unintended binary in os/exec on Windows 7.8 High -
go1.17SUSE Path traversal via Clean on Windows in path/filepath 7.5 High -
go1.17SUSE golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
go1.17SUSE The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
go1.17SUSE encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
go1.17SUSE regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
go1.17SUSE cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
go1.17SUSE Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
go1.17SUSE Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
go1.17SUSE Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file... 4.8 Medium -
go1.17SUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
go1.17SUSE Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted... 7.5 High -
go1.17SUSE ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17... 7.5 High -
go1.17SUSE Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function... 9.8 Critical -
go1.17SUSE In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely... 7.5 High