golang-1.13 vulnerabilities (Ubuntu)
157 vulnerabilities.
golang-1.13UbuntuInfinite loop in parsing in go/scanner7.5 Highgolang-1.13UbuntuExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 Highgolang-1.13UbuntuExcessive memory allocation in net/http and net/textproto7.5 Highgolang-1.13UbuntuIncorrect calculation on P256 curves in crypto/internal/nistec5.3 Mediumgolang-1.13UbuntuExcessive resource consumption in mime/multipart7.5 Highgolang-1.13UbuntuDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-1.13UbuntuPanic on large handshake records in crypto/tls7.5 Highgolang-1.13UbuntuExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumgolang-1.13UbuntuUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 Highgolang-1.13UbuntuIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highgolang-1.13UbuntuMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-1.13UbuntuUnbounded memory consumption when reading headers in archive/tar7.5 Highgolang-1.13Ubuntugolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgolang-1.13UbuntuPanic when decoding Float and Rat types in math/big7.5 Highgolang-1.13UbuntuExposure of client IP addresses in net/http6.5 Mediumgolang-1.13UbuntuStack exhaustion when decoding certain messages in encoding/gob7.5 Highgolang-1.13UbuntuStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highgolang-1.13UbuntuStack exhaustion on crafted paths in path/filepath7.5 Highgolang-1.13UbuntuStack exhaustion when reading certain archives in compress/gzip7.5 Highgolang-1.13UbuntuStack exhaustion in Glob on certain paths in io/fs7.5 Highgolang-1.13UbuntuStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgolang-1.13UbuntuImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgolang-1.13UbuntuSession tickets lack random ticket_age_add in crypto/tls3.1 Lowgolang-1.13Ubuntugolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumgolang-1.13Ubunturegexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-1.13Ubuntucmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highgolang-1.13UbuntuRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-1.13UbuntuGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-1.13UbuntuGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-1.13UbuntuGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 Highgolang-1.13UbuntuThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumgolang-1.13Ubuntuarchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...5.5 Mediumgolang-1.13Ubuntuencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 Highgolang-1.13UbuntuIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgolang-1.13UbuntuAuthentication Bypass in github.com/russellhaering/gosaml29.8 Criticalgolang-1.13UbuntuThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 Criticalgolang-1.13UbuntuThe encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the...9.8 Criticalgolang-1.13UbuntuArbitrary code execution via the go command with cgo in cmd/go7.5 Highgolang-1.13UbuntuArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 Highgolang-1.13UbuntuGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 Mediumgolang-1.13UbuntuWithdrawn Advisory: Infinite loop in xz7.5 Highgolang-1.13UbuntuGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumgolang-1.13UbuntuHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 Highgolang-1.13UbuntuGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 Highgolang-1.13UbuntuInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical