golang-1.16 vulnerabilities (Ubuntu)
153 vulnerabilities.
golang-1.16UbuntuBackticks not treated as string delimiters in html/template9.8 Criticalgolang-1.16UbuntuInfinite loop in parsing in go/scanner7.5 Highgolang-1.16UbuntuExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 Highgolang-1.16UbuntuExcessive memory allocation in net/http and net/textproto7.5 Highgolang-1.16UbuntuIncorrect calculation on P256 curves in crypto/internal/nistec5.3 Mediumgolang-1.16UbuntuExcessive resource consumption in mime/multipart7.5 Highgolang-1.16UbuntuDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-1.16UbuntuPanic on large handshake records in crypto/tls7.5 Highgolang-1.16UbuntuExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumgolang-1.16UbuntuUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 Highgolang-1.16UbuntuIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highgolang-1.16UbuntuMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-1.16UbuntuUnbounded memory consumption when reading headers in archive/tar7.5 Highgolang-1.16Ubuntugolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgolang-1.16UbuntuPanic when decoding Float and Rat types in math/big7.5 Highgolang-1.16UbuntuExposure of client IP addresses in net/http6.5 Mediumgolang-1.16UbuntuStack exhaustion when decoding certain messages in encoding/gob7.5 Highgolang-1.16UbuntuStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highgolang-1.16UbuntuStack exhaustion on crafted paths in path/filepath7.5 Highgolang-1.16UbuntuStack exhaustion when reading certain archives in compress/gzip7.5 Highgolang-1.16UbuntuStack exhaustion in Glob on certain paths in io/fs7.5 Highgolang-1.16UbuntuStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgolang-1.16UbuntuImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgolang-1.16UbuntuSession tickets lack random ticket_age_add in crypto/tls3.1 Lowgolang-1.16Ubuntugolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumgolang-1.16Ubunturegexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-1.16Ubuntucmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highgolang-1.16UbuntuRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-1.16UbuntuGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 Highgolang-1.16UbuntuImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 Highgolang-1.16UbuntuGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-1.16UbuntuIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 Highgolang-1.16UbuntuGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-1.16UbuntuGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 Highgolang-1.16UbuntuThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumgolang-1.16UbuntuGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 Highgolang-1.16UbuntuGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 Mediumgolang-1.16UbuntuGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 Highgolang-1.16UbuntuGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 Highgolang-1.16Ubuntugolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 Mediumgolang-1.16UbuntuInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical