golang-misc vulnerabilities (TuxCare)
62 vulnerabilities.
golang-miscTuxCareExcessive CPU consumption from repeated initial window changes in net/http7.5 Highgolang-miscTuxCareLack of limit on size of parsed Range headers in net/http7.5 Highgolang-miscTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgolang-miscTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgolang-miscTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highgolang-miscTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumgolang-miscTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgolang-miscTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highgolang-miscTuxCaregolang: Fix of 5 CVEsNo scoregolang-miscTuxCareInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgolang-miscTuxCareRoot escape via symlink plus trailing slash in os7.8 Highgolang-miscTuxCareArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgolang-miscTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgolang-miscTuxCareInefficient candidate hostname parsing in crypto/x5096.5 Mediumgolang-miscTuxCareMalicious module proxy can bypass checksum database in cmd/go7.5 Highgolang-miscTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highgolang-miscTuxCareEscaper bypass leads to XSS in html/template6.1 Mediumgolang-miscTuxCareReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgolang-miscTuxCareBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgolang-miscTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highgolang-miscTuxCareInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgolang-miscTuxCareInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgolang-miscTuxCareInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgolang-miscTuxCareCrash when handling long CNAME response in net7.5 Highgolang-miscTuxCareJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgolang-miscTuxCareUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgolang-miscTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgolang-miscTuxCareTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgolang-miscTuxCareUnexpected work during chain building in crypto/x5097.5 Highgolang-miscTuxCareMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgolang-miscTuxCareURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgolang-miscTuxCareFileInfo can escape from a Root in os2.5 Lowgolang-miscTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highgolang-miscTuxCarePotential code smuggling via doc comments in cmd/cgo8.6 Highgolang-miscTuxCareUnexpected session resumption in crypto/tls10.0 Criticalgolang-miscTuxCareArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgolang-miscTuxCareUnexpected code execution when invoking toolchain in cmd/go7.0 Highgolang-miscTuxCareHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgolang-miscTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgolang-miscTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highgolang-miscTuxCareImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgolang-miscTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgolang-miscTuxCareQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgolang-miscTuxCarePanic when validating certificates with DSA public keys in crypto/x5097.5 Highgolang-miscTuxCareQuadratic complexity when checking name constraints in crypto/x5097.5 Highgolang-miscTuxCareUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgolang-miscTuxCareIncorrect results returned from Rows.Scan in database/sql7.0 Highgolang-miscTuxCareUnexpected paths returned from LookPath in os/exec6.5 Mediumgolang-miscTuxCareUnexpected command execution in untrusted VCS repositories in cmd/go8.6 Highgolang-miscTuxCareUpdate of golangNo score- Show olderLoading…