Lucene search

[ASA-201908-15] go: multiple issues

🗓️ 24 Aug 2019 00:00:00Reported by ArchLinuxType

archlinux🔗 security.archlinux.org👁 31 Views

The go package before 2:1.12.8-1 on Arch Linux allows a remote attacker to conduct denial of service attacks and bypass authorization due to multiple HTTP/2 implementation issues

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	Debian DSA-4503-1 : golang-1.11 - security update (Ping Flood) (Reset Flood)	20 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : go1.11 (openSUSE-2019-2072) (Ping Flood) (Reset Flood)	6 Sep 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : go1.12 (openSUSE-2019-2000) (Ping Flood) (Reset Flood)	26 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : go1.12 (openSUSE-2019-2085) (Ping Flood) (Reset Flood)	9 Sep 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : go1.12 (openSUSE-2019-2130) (Ping Flood) (Reset Flood)	16 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : golang (EulerOS-SA-2019-2078)	30 Sep 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : golang (ALAS-2019-1270) (Ping Flood) (Reset Flood)	28 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : go1.12 (openSUSE-2019-2056) (Ping Flood) (Reset Flood)	3 Sep 201900:00	–	nessus
Tenable Nessus	Fedora 29 : golang (2019-65db7ad6c7) (Ping Flood) (Reset Flood)	9 Sep 201900:00	–	nessus
Tenable Nessus	Fedora 30 : golang (2019-55d101a740) (Ping Flood) (Reset Flood)	9 Sep 201900:00	–	nessus

Source	Link
security	www.security.archlinux.org/AVG-1021
groups	www.groups.google.com/forum/
github	www.github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
golang	www.golang.org/issue/29098
security	www.security.archlinux.org/CVE-2019-9512
security	www.security.archlinux.org/CVE-2019-9514
security	www.security.archlinux.org/CVE-2019-14809

OS	OS Version	Architecture	Package	Package Version	Filename
ArchLinux	any	any	go	2:1.12.8-1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Aug 2019 00:00Current

1.2Low risk

Vulners AI Score1.2

EPSS0.820

arch linux go package denial of service insufficient validation http/2 authorization bypass cve-2019-9512 cve-2019-9514 cve-2019-14809