CVE-2019-12158

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...

CVE-2019-12158

GoHTTP (up to 2017-07-25) contains a heap-based overflow in the GetExtension handling a long extension. The issue is documented across multiple sources (e.g., CVE-2019-12158 in NVD/Red Hat) as a heap overflow vulnerability affecting GoHTTP’s extension parsing. The connected documents confirm the ...

CVE-2019-12159: Out-of-bounds Read

GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...

CVE-2019-12158: Out-of-bounds Write

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...

CVE-2019-12160: Use After Free

GoHTTP through 2017-07-25 has a sendHeader use-after-free...