go1.18 vulnerabilities (SUSE)
28 vulnerabilities.
-
go1.18SUSE Excessive resource consumption in mime/multipart 7.5 High -
go1.18SUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
go1.18SUSE Panic on large handshake records in crypto/tls 7.5 High -
go1.18SUSE Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
go1.18SUSE Restricted file access on Windows in os and net/http 7.5 High -
go1.18SUSE Unsanitized NUL in environment variables on Windows in syscall and os/exec 7.5 High -
go1.18SUSE Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
go1.18SUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
go1.18SUSE Unbounded memory consumption when reading headers in archive/tar 7.5 High -
go1.18SUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
go1.18SUSE Panic when decoding Float and Rat types in math/big 7.5 High -
go1.18SUSE Exposure of client IP addresses in net/http 6.5 Medium -
go1.18SUSE Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
go1.18SUSE Stack exhaustion when unmarshaling certain documents in encoding/xml 7.5 High -
go1.18SUSE Stack exhaustion on crafted paths in path/filepath 7.5 High -
go1.18SUSE Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
go1.18SUSE Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
go1.18SUSE Stack exhaustion from deeply nested XML documents in encoding/xml 7.5 High -
go1.18SUSE Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
go1.18SUSE Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
go1.18SUSE Indefinite hang with large buffers on Windows in crypto/rand 7.5 High -
go1.18SUSE Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
go1.18SUSE Empty Cmd.Path can trigger unintended binary in os/exec on Windows 7.8 High -
go1.18SUSE Path traversal via Clean on Windows in path/filepath 7.5 High -
go1.18SUSE golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
go1.18SUSE The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
go1.18SUSE Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when... 7.5 High -
go1.18SUSE encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High