Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0377
HistoryOct 19, 2022 - 2:14 a.m.

Updated golang packages fix security vulnerability

2022-10-1902:14:56
Gentoo Foundation
advisories.mageia.org
13

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

56.3%

JSON

regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchgolang< 1.18.7-1golang-1.18.7-1.mga8

Related

openvas 13
altlinux 1
nessus 56
oraclelinux 10
osv 20
suse 2
photon 4
freebsd 1
almalinux 9
rocky 2
ibm 18
redhat 19
fedora 2
amazon 2
cbl_mariner 8
ubuntucve 4
cve 4
prion 4
veracode 4
alpinelinux 4
redhatcve 4
debiancve 4
huntr 1
cnvd 2
slackware 1
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0377)
2022-10-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3668-1)
2022-10-20 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-59a20edab2)
2022-10-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.7-alt1
2022-10-18 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : go1.19 (SUSE-SU-2022:3669-1)
2022-10-20 00:00:00
Oracle Linux 9 : go-toolset / and / golang (ELSA-2023-0328)
2023-01-24 00:00:00
Oracle Linux 8 : go-toolset:ol8 (ELSA-2023-0446)
2023-01-26 00:00:00
oraclelinux
oraclelinux
go-toolset and golang security and bug fix update
2023-01-24 00:00:00
go-toolset:ol8 security and bug fix update
2023-01-26 00:00:00
Image Builder security, bug fix, and enhancement update
2023-05-15 00:00:00
osv
osv
Moderate: go-toolset and golang security and bug fix update
2023-01-23 00:00:00
Moderate: go-toolset:rhel8 security and bug fix update
2023-01-25 00:00:00
Moderate: go-toolset and golang security and bug fix update
2023-01-23 14:30:17
suse
suse
Security update for go1.18 (important)
2022-10-20 00:00:00
Security update for go1.19 (important)
2022-10-20 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0273
2022-11-02 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0273
2022-11-02 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0478
2022-10-27 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-10-04 00:00:00
almalinux
almalinux
Moderate: go-toolset and golang security and bug fix update
2023-01-23 00:00:00
Moderate: go-toolset:rhel8 security and bug fix update
2023-01-25 00:00:00
Moderate: Image Builder security, bug fix, and enhancement update
2023-05-16 00:00:00
rocky
rocky
go-toolset and golang security and bug fix update
2023-01-23 14:30:17
go-toolset:rhel8 security and bug fix update
2023-01-25 08:59:15
ibm
ibm
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple Go vulnerabilities
2023-01-31 10:35:36
Security Bulletin: Operations Dashboard is vulnerable to multiple Go CVEs
2023-01-05 13:12:19
Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced
2023-03-16 15:24:48
redhat
redhat
(RHSA-2023:0445) Moderate: go-toolset-1.18 security update
2023-01-25 08:25:10
(RHSA-2023:0708) Moderate: Release of OpenShift Serverless Client kn 1.27.0
2023-02-09 09:22:38
(RHSA-2023:2780) Moderate: Image Builder security, bug fix, and enhancement update
2023-05-16 05:54:33
fedora
fedora
[SECURITY] Fedora 37 Update: golang-1.19.2-1.fc37
2022-10-17 22:55:43
[SECURITY] Fedora 36 Update: golang-1.18.7-1.fc36
2022-10-14 13:01:37
amazon
amazon
Important: golist
2023-01-18 00:17:00
Important: golang
2022-12-01 20:31:00
cbl_mariner
cbl_mariner
CVE-2022-41715 affecting package golang for versions less than 1.19.5-1
2024-02-25 03:00:06
CVE-2022-41715 affecting package golang 1.17.13-2
2024-04-26 21:08:17
CVE-2022-2880 affecting package golang for versions less than 1.19.10-1
2024-02-25 03:00:06
ubuntucve
ubuntucve
CVE-2022-41715
2022-10-14 00:00:00
CVE-2022-2889
2022-08-19 00:00:00
CVE-2022-2880
2022-10-14 00:00:00
cve
cve
CVE-2022-41715
2022-10-14 15:16:00
CVE-2022-2880
2022-10-14 15:15:00
CVE-2022-2889
2022-08-19 13:15:00
prion
prion
Memory corruption
2022-10-14 15:16:00
Design/Logic Flaw
2022-10-14 15:15:00
Design/Logic Flaw
2022-10-14 15:15:00
veracode
veracode
Denial Of Service (DoS)
2022-10-14 04:05:34
Denial Of Service (DoS)
2022-09-01 12:17:46
HTTP Request Smuggling
2022-10-14 11:52:42
alpinelinux
alpinelinux
CVE-2022-41715
2022-10-14 15:16:00
CVE-2022-2889
2022-08-19 13:15:00
CVE-2022-2880
2022-10-14 15:15:00
redhatcve
redhatcve
CVE-2022-41715
2022-10-07 05:26:46
CVE-2022-2880
2022-10-07 05:26:50
CVE-2022-2879
2023-02-09 21:20:08
debiancve
debiancve
CVE-2022-41715
2022-10-14 15:16:00
CVE-2022-2880
2022-10-14 15:15:00
CVE-2022-2879
2022-10-14 15:15:00
huntr
huntr
Use After Free in function find_var_also_in_script
2022-08-17 00:03:52
cnvd
cnvd
Vim Resource Management Error Vulnerability (CNVD-2022-59203)
2022-08-23 00:00:00
Google Golang Denial of Service Vulnerability
2022-10-11 00:00:00
slackware
slackware
[slackware-security] vim
2022-08-20 20:09:46

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

56.3%

JSON
Related for MGASA-2022-0377
openvas13altlinux1nessus56oraclelinux10osv20suse2photon4freebsd1almalinux9rocky2ibm18redhat19fedora2amazon2cbl_mariner8ubuntucve4cve4prion4veracode4alpinelinux4redhatcve4debiancve4huntr1cnvd2slackware1