go1.11 vulnerabilities (openSUSE)

16 vulnerabilities.

• go1.11 openSUSE net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading... CVE-2019-14809 Fix available 9.8 CriticalAugust 13, 2019
• go1.11 openSUSE Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• go1.11 openSUSE Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service CVE-2019-9512 Fix available EPSS 83.4% 7.5 HighAugust 13, 2019
• go1.11 openSUSE runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... CVE-2019-5736 Public exploitFix available EPSS 98.5% 8.6 HighFebruary 11, 2019
• go1.11 openSUSE Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which... CVE-2019-6486 Fix available 8.2 HighJanuary 24, 2019
• go1.11 openSUSE The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... CVE-2018-16875 Public exploitFix available 5.9 MediumDecember 14, 2018
• go1.11 openSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... CVE-2018-16874 Fix available 6.8 MediumDecember 14, 2018
• go1.11 openSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... CVE-2018-16873 Fix available EPSS 66.3% 7.5 HighDecember 14, 2018
• go1.11 openSUSE Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"... CVE-2018-6574 Public exploitFix available 7.8 HighFebruary 7, 2018
• go1.11 openSUSE An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires... CVE-2017-15042 Fix available 5.9 MediumOctober 5, 2017
• go1.11 openSUSE Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom... CVE-2017-15041 Fix available 9.8 CriticalOctober 5, 2017
• go1.11 openSUSE A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in... CVE-2017-8932 Fix available 5.9 MediumJune 22, 2017
• go1.11 openSUSE The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18... CVE-2016-5386 Fix available 8.1 HighJuly 18, 2016
• go1.11 openSUSE The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not... CVE-2016-3959 Public exploitFix available 7.5 HighMay 23, 2016
• go1.11 openSUSE The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry... CVE-2015-8618 Fix available 7.5 HighJanuary 27, 2016
• go1.11 openSUSE crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the... CVE-2014-7189 Fix available 4.3 MediumOctober 7, 2014