Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4848-1:D81AC
HistoryFeb 08, 2021 - 9:24 p.m.

[SECURITY] [DSA 4848-1] golang-1.11 security update

2021-02-0821:24:09
lists.debian.org
51

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.014 Low

EPSS

Percentile

86.4%

JSON

Debian Security Advisory DSA-4848-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
February 08, 2021 https://www.debian.org/security/faq

Package : golang-1.11
CVE ID : CVE-2020-7919 CVE-2020-15586 CVE-2020-16845 CVE-2021-3114

Multiple security issues were discovered in the implementation of the
Go programming language, which could result in denial of service and
the P-224 curve implementation could generate incorrect outputs.

For the stable distribution (buster), these problems have been fixed in
version 1.11.6-1+deb10u4.

We recommend that you upgrade your golang-1.11 packages.

For the detailed security status of golang-1.11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/golang-1.11

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian10armelgolang-1.11-go< 1.11.6-1+deb10u4golang-1.11-go_1.11.6-1+deb10u4_armel.deb
Debian10i386golang-1.11-src< 1.11.6-1+deb10u4golang-1.11-src_1.11.6-1+deb10u4_i386.deb
Debian9allgolang-1.8-doc< 1.8.1-1+deb9u3golang-1.8-doc_1.8.1-1+deb9u3_all.deb
Debian9armelgolang-1.8-go< 1.8.1-1+deb9u3golang-1.8-go_1.8.1-1+deb9u3_armel.deb
Debian9i386golang-1.8-src< 1.8.1-1+deb9u3golang-1.8-src_1.8.1-1+deb9u3_i386.deb
Debian9i386golang-1.8-go< 1.8.1-1+deb9u3golang-1.8-go_1.8.1-1+deb9u3_i386.deb
Debian10allgolang-1.11< 1.11.6-1+deb10u4golang-1.11_1.11.6-1+deb10u4_all.deb
Debian9allgolang-1.7< 1.7.4-2+deb9u3golang-1.7_1.7.4-2+deb9u3_all.deb
Debian10mipsgolang-1.11-src< 1.11.6-1+deb10u4golang-1.11-src_1.11.6-1+deb10u4_mips.deb
Debian10arm64golang-1.11-go< 1.11.6-1+deb10u4golang-1.11-go_1.11.6-1+deb10u4_arm64.deb
Rows per page:
1-10 of 511

Related

nessus 50
openvas 24
osv 21
redhat 16
ibm 21
debian 2
mageia 2
suse 4
oraclelinux 4
fedora 5
gitlab 1
alpinelinux 4
ubuntucve 4
debiancve 4
veracode 4
photon 5
cve 4
github 2
cgr 1
wolfi 1
prion 4
redhatcve 4
cloudfoundry 1
amazon 2
cbl_mariner 3
freebsd 1
altlinux 2
ubuntu 2
f5 1
nessus
nessus
Debian DSA-4848-1 : golang-1.11 - security update
2021-02-10 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.9 packages and (RHSA-2021:1366)
2021-05-05 00:00:00
RHEL 8 : Red Hat OpenShift Service Mesh 1.1.11 (RHSA-2020:5649)
2020-12-22 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4848-1)
2021-02-10 00:00:00
Debian: Security Advisory (DLA-2459-1)
2020-11-22 00:00:00
Mageia: Security Advisory (MGASA-2020-0325)
2022-01-28 00:00:00
osv
osv
golang-1.11 - security update
2021-02-08 00:00:00
golang-1.7 - security update
2020-11-21 00:00:00
golang-1.8 - security update
2020-11-21 00:00:00
redhat
redhat
(RHSA-2021:1366) Moderate: OpenShift Container Platform 4.7.9 packages and security update
2021-05-04 19:16:05
(RHSA-2021:4103) Moderate: OpenShift Virtualization 4.9.0 RPMs security and bug fix update
2021-11-02 13:25:34
(RHSA-2020:5119) Moderate: OpenShift Container Platform 4.5.20 packages and golang security update
2020-11-24 11:38:30
ibm
ibm
Security Bulletin: Upgrade to IBP v2.5.1 to address recent concerns/issues with Golang versions other than 1.14.7
2020-12-04 16:07:39
Security Bulletin: IBM Cloud Pak for Integration Operators affected by multiple vulnerabilities
2020-10-02 13:03:47
Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.
2021-02-04 21:36:22
debian
debian
[SECURITY] [DLA 2459-1] golang-1.7 security update
2020-11-21 16:15:56
[SECURITY] [DLA 2460-1] golang-1.8 security update
2020-11-21 16:41:04
mageia
mageia
Updated golang packages fix security vulnerability
2020-08-18 20:41:27
Updated golang packages fix security vulnerability
2020-04-15 13:12:14
suse
suse
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.13 (moderate)
2020-08-11 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security update
2020-09-11 00:00:00
kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update
2020-08-24 00:00:00
olcne conmon coredns cri-o cri-tools etcd flannel grafana helm istio kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard prometheus yq security update
2020-08-31 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: golang-1.14.7-1.fc32
2020-09-07 17:14:54
[SECURITY] Fedora 31 Update: golang-1.13.9-1.fc31
2020-04-09 18:19:14
[SECURITY] Fedora 32 Update: golang-github-ulikunitz-xz-0.5.8-1.fc32
2020-08-28 14:55:45
gitlab
gitlab
Improper Certificate Validation
2021-06-23 00:00:00
alpinelinux
alpinelinux
CVE-2020-7919
2020-03-16 21:15:00
CVE-2020-15586
2020-07-17 16:15:00
CVE-2020-16845
2020-08-06 18:15:00
ubuntucve
ubuntucve
CVE-2020-7919
2020-03-16 00:00:00
CVE-2020-15586
2020-07-17 00:00:00
CVE-2020-16845
2020-08-06 00:00:00
debiancve
debiancve
CVE-2020-7919
2020-03-16 21:15:00
CVE-2020-15586
2020-07-17 16:15:00
CVE-2020-16845
2020-08-06 18:15:00
veracode
veracode
Denial Of Service (DoS)
2020-01-30 02:08:48
Denial Of Service (DoS)
2020-07-17 06:00:32
Denial Of Service (DoS)
2020-08-13 04:32:40
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0238
2020-05-02 00:00:00
Important Photon OS Security Update - PHSA-2020-0087
2020-05-09 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0276
2020-08-25 00:00:00
cve
cve
CVE-2020-7919
2020-03-16 21:15:00
CVE-2020-15586
2020-07-17 16:15:00
CVE-2020-16845
2020-08-06 18:15:00
github
github
Helm uses crypto package vulnerable to panic from malformed X.509 certificate
2021-06-23 18:02:39
Infinite loop in xz
2021-12-16 19:16:40
cgr
cgr
CVE-2020-7919 vulnerabilities
2024-04-26 03:19:48
wolfi
wolfi
CVE-2020-7919 vulnerabilities
2024-04-26 09:06:29
prion
prion
Code injection
2020-03-16 21:15:00
Design/Logic Flaw
2020-07-17 16:15:00
Design/Logic Flaw
2020-08-06 18:15:00
redhatcve
redhatcve
CVE-2020-7919
2020-04-03 20:00:02
CVE-2020-15586
2021-08-15 06:10:24
CVE-2020-16845
2022-05-14 11:32:38
cloudfoundry
cloudfoundry
CVE-2020-15586: Gorouter is vulnerable to DoS Attack via Expect: 100-continue requests | Cloud Foundry
2020-07-15 00:00:00
amazon
amazon
Medium: golang
2020-08-26 23:09:00
Medium: golang
2020-08-18 20:23:00
cbl_mariner
cbl_mariner
CVE-2020-15586 affecting package golang 1.13.11-
2021-07-08 21:56:48
CVE-2020-16845 affecting package golang 1.13.11-
2021-07-08 21:56:48
CVE-2021-3114 affecting package golang 1.15.5-1
2021-07-08 21:56:48
freebsd
freebsd
go -- encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs
2020-08-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.14.7-alt1
2020-08-10 00:00:00
Security fix for the ALT Linux 9 package golang version 1.14.7-alt1
2020-08-19 00:00:00
ubuntu
ubuntu
Go vulnerability
2023-05-23 00:00:00
Go vulnerability
2022-11-15 00:00:00
f5
f5
K15405135 : GO vulnerability CVE-2021-3114
2021-11-10 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.014 Low

EPSS

Percentile

86.4%

JSON
Related for DEBIAN:DSA-4848-1:D81AC
nessus50openvas24osv21redhat16ibm21debian2mageia2suse4oraclelinux4fedora5gitlab1alpinelinux4ubuntucve4debiancve4veracode4photon5cve4github2cgr1wolfi1prion4redhatcve4cloudfoundry1amazon2cbl_mariner3freebsd1altlinux2ubuntu2f51