The vulnerability of the GoLang development tool for application software “Aurora Center” relates to the execution of a loop with an unavailable exit condition, allowing attackers to cause service failures.

🗓️ 09 Jun 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Language tool used by Aurora Center has a loop with an unmet exit condition risking service failures.

Reporter	Title	Published	Views	Family All 235
IBM Security Bulletins	Security Bulletin: Upgrade to IBP v2.5.1 to address recent concerns/issues with Golang versions other than 1.14.7	4 Dec 202016:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Go	29 Aug 202008:59	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Golang (CVE-2020-16845)	28 Oct 202016:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in the Go runtime (CVE-2020-16845)	26 Sep 202019:06	–	ibm
IBM Security Bulletins	Security Bulletin: GO is suspectible for denial of service on IBM Watson Machine Learning on CP4D	3 May 202115:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration Operators affected by multiple vulnerabilities	2 Oct 202013:03	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is vulnerable to denial of service (CVE-2020-16845)	8 Oct 202001:53	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Service.	14 Dec 202018:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.	4 Feb 202121:36	–	ibm

Vulners

Node

go goRange<1.13.15

OR

go goRange1.14–1.14.7

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-16845
snyk	www.snyk.io/vuln/SNYK-DEBIAN11-GOLANG115-597555
groups	www.groups.google.com/forum/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

16 Sep 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

CVSS 37.5

EPSS0.04692

Go language tool Aurora Center Aurora application software unmet exit condition service failures