golang.org/x/net/html NULL Pointer Dereference vulnerability

🗓️ 13 May 2022 01:22:19Reported by GitHub Advisory DatabaseType

The html package mishandles "in frameset" mode, leading to a "panic: runtime error" for html.Parse of certain element

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 19
GitLab Advisory Database	NULL Pointer Dereference	13 May 202200:00	–	gitlab
GitLab Advisory Database	NULL Pointer Dereference	13 May 202200:00	–	gitlab
Prion	Hardcoded credentials	16 Sep 201802:29	–	prion
RedhatCVE	CVE-2018-17075	26 Sep 201806:18	–	redhatcve
OSV	Panic when parsing malformed HTML in golang.org/x/net/html	14 Apr 202120:04	–	osv
OSV	golang.org/x/net/html NULL Pointer Dereference vulnerability	13 May 202201:19	–	osv
OSV	CVE-2018-17075	16 Sep 201802:29	–	osv
Veracode	Denial Of Service (DoS)	17 Sep 201808:13	–	veracode
Debian CVE	CVE-2018-17075	16 Sep 201802:29	–	debiancve
UbuntuCve	CVE-2018-17075	16 Sep 201800:00	–	ubuntucve

Vulners

Node

x netRange<0.0.0-20180816102801-aaf60122140d

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-17075
github	www.github.com/golang/go/issues/27016
github	www.github.com/golang/net/commit/aaf60122140d3fcf75376d319f0554393160eb50
bugs	www.bugs.chromium.org/p/chromium/issues/detail
go-review	www.go-review.googlesource.com/c/net/+/94838/9/html/parse.go
go	www.go.dev/cl/123776
go	www.go.dev/issue/27016
go	www.go.googlesource.com/net/+/aaf60122140d3fcf75376d319f0554393160eb50
pkg	www.pkg.go.dev/vuln/GO-2021-0078
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 May 2022 01:19Current

1.2Low risk

Vulners AI Score1.2

CVSS25

CVSS37.5

EPSS0.00759

CWE-476