golang-1.6 vulnerabilities (Ubuntu)
153 vulnerabilities.
golang-1.6UbuntuMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-1.6UbuntuUnbounded memory consumption when reading headers in archive/tar7.5 Highgolang-1.6Ubuntugolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgolang-1.6UbuntuPanic when decoding Float and Rat types in math/big7.5 Highgolang-1.6Ubuntugolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumgolang-1.6Ubunturegexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highgolang-1.6Ubuntucmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highgolang-1.6UbuntuRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highgolang-1.6UbuntuGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 Criticalgolang-1.6UbuntuGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumgolang-1.6UbuntuGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 Highgolang-1.6UbuntuThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumgolang-1.6Ubuntuarchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...5.5 Mediumgolang-1.6Ubuntuencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 Highgolang-1.6UbuntuIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgolang-1.6UbuntuAuthentication Bypass in github.com/russellhaering/gosaml29.8 Criticalgolang-1.6UbuntuThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 Criticalgolang-1.6UbuntuThe encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the...9.8 Criticalgolang-1.6UbuntuArbitrary code execution via the go command with cgo in cmd/go7.5 Highgolang-1.6UbuntuArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 Highgolang-1.6UbuntuGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 Mediumgolang-1.6UbuntuWithdrawn Advisory: Infinite loop in xz7.5 Highgolang-1.6UbuntuGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumgolang-1.6UbuntuGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 Highgolang-1.6UbuntuGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 Highgolang-1.6Ubuntunet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 Criticalgolang-1.6UbuntuSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highgolang-1.6UbuntuSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highgolang-1.6UbuntuAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 Mediumgolang-1.6UbuntuGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 Highgolang-1.6UbuntuThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...5.9 Mediumgolang-1.6UbuntuIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...6.8 Mediumgolang-1.6UbuntuIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...7.5 Highgolang-1.6UbuntuThe "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not...8.8 Highgolang-1.6UbuntuGo before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"...7.8 Highgolang-1.6UbuntuAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 Mediumgolang-1.6UbuntuGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...9.8 Criticalgolang-1.6UbuntuThe net/http package's Request.ParseMultipartForm method starts writing to temporary files once...7.5 Highgolang-1.6UbuntuA bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in...5.9 Mediumgolang-1.6UbuntuInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Criticalgolang-1.6UbuntuThe net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18...8.1 High