Skip to content
OpenAdvisories

Product · [UNKNOWN]

golang

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…

    [UNKNOWN] golang golang stdlib Ubuntu Azure Linux Go
  • Medium 6.8
    CVE-2018-16874

    Directory traversal via "go get" command in cmd/go

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable…

    [UNKNOWN] golang golang-1.8 golang-1.10 Ubuntu Go