37 matches found
CVE-2019-12198
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header...
CVE-2019-12198
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header...
CVE-2019-12198
CVE-2019-12198 affects GoHttp (up to 2017-07-25). The vulnerability is a stack-based buffer over-read triggered by a long User-Agent header. Red Hat and NVD entries confirm the issue; no additional technical details (components, affected versions, root cause, exploit specifics, or fixes) are prov...
CVE-2019-12159
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
Heap overflow
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...
CVE-2019-12160
GoHTTP through 2017-07-25 has a sendHeader use-after-free...
CVE-2019-12158
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...
CVE-2019-12158
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...
CVE-2019-12159
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
Design/Logic Flaw
GoHTTP through 2017-07-25 has a sendHeader use-after-free...
CVE-2019-12160
GoHTTP through 2017-07-25 has a sendHeader use-after-free...
CVE-2019-12160
CVE-2019-12160 affects GoHTTP up to 2017-07-25, with a use-after-free in the sendHeader path. The issue is described consistently across NVD/Red Hat/NVD mirror entries; no exploit details or fixes are provided in the supplied documents. The CVSS data indicates a high to critical impact profile (n...
CVE-2019-12160
GoHTTP through 2017-07-25 has a sendHeader use-after-free...
CVE-2019-12159
GoHTTP (up to 2017-07-25) contains a stack-based buffer over-read in the scan function invoked by getRequestType when processing a long URL. This is the concrete vulnerability described in CVE-2019-12159 and mirrored in multiple feeds (NVD, Red Hat, CVE lists). The available documents do not spec...
CVE-2019-12159
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
CVE-2019-12158
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...
CVE-2019-12158
GoHTTP (up to 2017-07-25) contains a heap-based overflow in the GetExtension handling a long extension. The issue is documented across multiple sources (e.g., CVE-2019-12158 in NVD/Red Hat) as a heap overflow vulnerability affecting GoHTTP’s extension parsing. The connected documents confirm the ...