go1.18-openssl vulnerabilities (openSUSE)
28 vulnerabilities.
go1.18-opensslopenSUSEExcessive resource consumption in mime/multipart7.5 Highgo1.18-opensslopenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgo1.18-opensslopenSUSEPanic on large handshake records in crypto/tls7.5 Highgo1.18-opensslopenSUSEExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumgo1.18-opensslopenSUSERestricted file access on Windows in os and net/http7.5 Highgo1.18-opensslopenSUSEUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 Highgo1.18-opensslopenSUSEIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highgo1.18-opensslopenSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgo1.18-opensslopenSUSEUnbounded memory consumption when reading headers in archive/tar7.5 Highgo1.18-opensslopenSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgo1.18-opensslopenSUSEPanic when decoding Float and Rat types in math/big7.5 Highgo1.18-opensslopenSUSEExposure of client IP addresses in net/http6.5 Mediumgo1.18-opensslopenSUSEStack exhaustion when decoding certain messages in encoding/gob7.5 Highgo1.18-opensslopenSUSEStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highgo1.18-opensslopenSUSEStack exhaustion on crafted paths in path/filepath7.5 Highgo1.18-opensslopenSUSEStack exhaustion when reading certain archives in compress/gzip7.5 Highgo1.18-opensslopenSUSEStack exhaustion in Glob on certain paths in io/fs7.5 Highgo1.18-opensslopenSUSEStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgo1.18-opensslopenSUSEStack exhaustion due to deeply nested types in go/parser5.5 Mediumgo1.18-opensslopenSUSEImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgo1.18-opensslopenSUSEIndefinite hang with large buffers on Windows in crypto/rand7.5 Highgo1.18-opensslopenSUSESession tickets lack random ticket_age_add in crypto/tls3.1 Lowgo1.18-opensslopenSUSEEmpty Cmd.Path can trigger unintended binary in os/exec on Windows7.8 Highgo1.18-opensslopenSUSEPath traversal via Clean on Windows in path/filepath7.5 Highgo1.18-opensslopenSUSEgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumgo1.18-opensslopenSUSEThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 Highgo1.18-opensslopenSUSECertificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when...7.5 Highgo1.18-opensslopenSUSEencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 High