go vulnerabilities (openSUSE)
14 vulnerabilities.
-
goopenSUSE runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... 8.6 High -
goopenSUSE Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which... 8.2 High -
goopenSUSE The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... 5.9 Medium -
goopenSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... 6.8 Medium -
goopenSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... 7.5 High -
goopenSUSE The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not... 8.8 High -
goopenSUSE Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"... 7.8 High -
goopenSUSE An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires... 5.9 Medium -
goopenSUSE Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom... 9.8 Critical -
goopenSUSE A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in... 5.9 Medium -
goopenSUSE The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18... 8.1 High -
goopenSUSE The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not... 7.5 High -
goopenSUSE The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry... 7.5 High -
goopenSUSE crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the... 4.3 Medium