Skip to content
OpenAdvisories

Package · Ubuntu

golang-1.13

155 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-8244

    Walk/WalkDir in path/filepath susceptible to symlink race

    The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic lin…

    Go standard library path/filepath golang-1.13 golang-1.10 Debian Ubuntu
  • Low 3.1
    CVE-2022-30629

    Session tickets lack random ticket_age_add in crypto/tls

    Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

    Go standard library crypto/tls golang go Debian Ubuntu Azure Linux Alpine Go