Security Bulletin: Operations Dashboard in IBM Cloud Pak for Integration is vulnerable to Go vulnerabilities CVE-2023-45290, CVE-2024-24783, CVE-2024-24785, CVE-2023-45289, CVE-2024-24784 & CVE-2024-24788

Summary Operations Dashboard in IBM Cloud Pak for Integration is vulnerable to denial of service and remote code execution due to Go vulnerabilities CVE-2023-45290, CVE-2024-24783, CVE-2024-24785, CVE-2023-45289, CVE-2024-24784 & CVE-2024-24788. These have been remediated. Vulnerability Details...

Denial Of Service (DoS)

github.com/wcharczuk/go-chart is vulnerable to Denial of Service DoS. The vulnerability is due to an infinite loop when executing the drawCanvas function with a StackedBarChart containing a long name value. If the name value originates from untrusted input, an attacker can cause an infinite loop...

Photon OS 3.0: Go PHSA-2022-3.0-0455

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0455. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204634...

Photon OS 3.0: Go PHSA-2023-3.0-0575

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0575. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203976...

Photon OS 4.0: Go PHSA-2023-4.0-0531

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0531. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204491...

Photon OS 5.0: Go PHSA-2023-5.0-0118

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0118. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204413...

Photon OS 4.0: Go PHSA-2023-4.0-0484

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0484. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204352...

Photon OS 3.0: Go PHSA-2022-3.0-0487

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0487. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203858...

CVE-2024-40060

go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas function...

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

...

CVE-2024-40060

go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas function...

Important Photon OS Security Update - PHSA-2024-5.0-91-0326

Updates of 'go', 'suricata' packages of Photon OS have been released...

go-chart 安全漏洞

go-chart is a very simple golang native charting library by Will Charczuk, a personal developer. A security vulnerability exists in go-chart version v2.1.1, which stems from an infinite loop in the drawCanvas function...

PT-2024-28769 · Go-Chart · Go-Chart

Name of the Vulnerable Software and Affected Versions: go-chart version 2.1.1 Description: The issue is related to an infinite loop in the drawCanvas function. This function is part of the go-chart library and is used for rendering charts. The infinite loop can cause the program to consume...

CVE-2024-40060

go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas function...

Photon OS 4.0: Go PHSA-2022-4.0-0282

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0282. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203436...

Photon OS 2.0: Go PHSA-2019-2.0-0175

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0175. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203088...

Important Photon OS Security Update - PHSA-2024-5.0-0326

Updates of 'suricata', 'go' packages of Photon OS have been released...

CVE-2024-40060

CVE-2024-40060 affects go-chart v2.1.1. The vulnerability is an infinite loop in the drawCanvas() function, which can cause a Denial of Service when a long name value is processed (noted in the Veracode entry and related advisories). Exploitation details are limited in the provided documents; one...

Security Bulletin: Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Standard.

Summary Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Standard. IBM CICS TX Standard has addressed the issues. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: Protocol Buffers protobuf-go is vulnerable to a denial of service, caused by an infinite loop...