Denial Of Service (DoS) Through Infinite Loop

archive/tar in github.com/golang/go is vulnerable to denial of service DoS attacks. Using a .tar file, attackers can cause an infinite loop to be triggered through the sparseFileReader...

Fedora 25 : golang (2017-278f46fcd6)

Bump to 1.7.6 - Security fix for CVE-2017-8932 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for golang FEDORA-2017-278f46fcd6

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: golang-1.7.6-1.fc25

The Go Programming Language...

CVE-2017-8932

A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used...

Cross-site Request Forgery (CSRF)

github.com/golang/net is vulnerable to cross-site request forgery CSRF attacks. The vulnerability is possible when a zero length secret key is passed...

Denial Of Service (DoS)

runtime/hashmap in github.com/golang/go is vulnerable to denial of service DoS attacks. The vulnerability exists because it uses uintptr in overLoadFactor of hashmap.go. With large number of potential buckets, a malicious user or a coding error can cause an infinite loop via overflow in 32-bit...

Private CRT-based RSA Key Leakage

crypto/rsa in github.com/golang/go is vulnerable to private CRT-based RSA key leakage. The leakage happens due to an error in the CRT computation. And it fails to check RSA signature to prevent the error...

Preloading Of Untrusted Windows DLL

github.com/golang/go contains an untrusted search path vulnerability. When used on Windows, it allows local users to gain privileges by using a Trojan Horse DLL. This is related to the use of the LoadLibrary function...

Man-in-the-middle (MitM)

github.com/golang/crypto is vulnerable to man-in-the-middle MitM attacks. The HostKeyCallback function currently interprets nil as to accept any host keys. A MitM server can allow the login to succeed and get the agemt to authenticate to the actual server...

Man-in-the-Middle (MitM)

crypto/tls in github.com/golang/go is vulnerable to man-in-the-middle MitM attacks. These attacks are possible when SessionTicketsDisabled is enabled...

Denial Of Service (DoS)

crypto/dsa in github.com/golang/go is vulnerable to denial of service DoS attacks. These attacks are possible due to a flaw in the Verify function in crypto/dsa/dsa.go. It doesn't properly check parameters passed to the big integer library. This flaw can be exploited through a a public key given ...

HTTPoxy Vulnerability

net/http/cgi and net/http in github.com/golang/go is vulnerable to httpoxy attacks. The vulnerability exists because it trusts the HTTPPROXY environment variable, and allows the configuration of proxies by setting the environment variables HTTPPROXY and HTTPSPROXY without checking if CGI is in us...

Cross-site Scripting (XSS)

net/http in github.com/golang/go is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the Error function as a user can control the error message...

Integer Overflow

github.com/golang/protobuf is vulnerable to integer overflows. A malicious user can pass an integer larger than 64-bit to the system, causing an integer overflow and crashing the system...

Request Smuggling

net/http in github.com/golang/go is vulnerable to request smuggling. This can be done because it does not correctly comply with RFC 7230. If a request is sent with both a Transfer-Encoding header and a Content-Length header, this was being ignored...

Insecure Crypto Implementation

crypto/elliptic in github.com/golang/go is vulnerable to an insecure crpyto implementation. The library allows for the unmarshalling of points on the elliptic curve, allowing a malicious user to gain information on the state of the elliptic curve...

HTTP Header Injection

net/textproto in github.com/golang/go is vulnerable to HTTP header injection attacks. These attacks are possible because it treats spaces as hyphens. This leaves net/textproto vulnerable to request smuggling...

PT-2017-4225 · Go · Golang.Org/X/Crypto/Ssh

Name of the Vulnerable Software and Affected Versions: golang.org/x/crypto/ssh versions prior to the version that includes commit e4e2799 Description: The issue is related to the default behavior of the Go SSH library, which does not verify host keys. This facilitates man-in-the-middle attacks if...

MGASA-2017-0019 Updated golang package fixes security vulnerability

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...