Lucene search
+L

9440 matches found

OSV
OSV
added 2016/09/23 8:57 p.m.10 views

MGASA-2016-0317 Updated golang package fixes security vulnerability

Updated golang packages fix security vulnerability: Go: sets environmental variable based on user supplied Proxy request header CVE-2016-5386...

8.1CVSS8.1AI score0.0522EPSS
SaveExploits0References3
Mageia
Mageia
added 2016/09/23 8:57 p.m.50 views

Updated golang package fixes security vulnerability

Updated golang packages fix security vulnerability: Go: sets environmental variable based on user supplied Proxy request header CVE-2016-5386...

8.1CVSS2.1AI score0.0522EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/08/18 12:00 a.m.44 views

Amazon Linux AMI : golang (ALAS-2016-731) (httpoxy)

An input-validation flaw was discovered in the Go programming language built in CGI implementation, which set the environment variable 'HTTPPROXY' using the incoming 'Proxy' HTTP-request header. The environment variable 'HTTPPROXY' is used by numerous web clients, including Go's net/http package,...

8.1CVSS6.9AI score0.0522EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/08/08 12:00 a.m.22 views

CentOS Update for golang CESA-2016:1538 centos7

Check the version of golang SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882533";...

8.1CVSS6.5AI score0.0522EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/08/04 12:00 a.m.28 views

Scientific Linux Security Update : golang on SL7.x x86_64 (20160803) (httpoxy)

The following packages have been upgraded to a newer upstream version: golang 1.6.3. Security Fixes : - An input-validation flaw was discovered in the Go programming language built in CGI implementation, which set the environment variable 'HTTPPROXY' using the incoming 'Proxy' HTTP-request header...

8.1CVSS6.8AI score0.0522EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/08/04 12:00 a.m.24 views

Fedora Update for golang FEDORA-2016-340e361b90

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.0522EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/08/04 12:00 a.m.19 views

Fedora Update for golang FEDORA-2016-ea5e284d34

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.0522EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/08/03 12:00 a.m.43 views

RHEL 7 : golang (RHSA-2016:1538) (httpoxy)

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.8AI score0.09625EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2016/08/03 12:00 a.m.37 views

CentOS 7 : golang (CESA-2016:1538) (httpoxy)

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.8AI score0.09625EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2016/08/03 12:00 a.m.39 views

Oracle Linux 7 : golang (ELSA-2016-1538)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1538 advisory. - Resolves: rhbz1358278 - CVE-2016-5386 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

8.1CVSS6.7AI score0.0522EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2016/08/02 9:57 p.m.72 views

golang security update

CentOS Errata and Security Advisory CESA-2016:1538 An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

9.8CVSS6.7AI score0.09625EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2016/08/02 6:20 p.m.9 views

golang: HTTP request smuggling in net/http library

HTTP-request vulnerabilities have been found in the Golang net/http and net/textproto libraries. Request headers with double Content-Length fields do not generate a 400 error the second field is ignored, and invalid fields are parsed as valid for example, "Content Length:" with a space in the...

9.8CVSS7.3AI score0.03657EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2016/08/02 6:20 p.m.53 views

Moderate: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.7AI score0.09625EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2016/08/02 12:00 a.m.51 views

golang security, bug fix, and enhancement update

1.6.3-1 - Resolves: rhbz1358278 - CVE-2016-5386 1.6.2-1 - rebase to 1.6.2 - Resolves: rhbz1346331...

6.8CVSS1.4AI score0.0522EPSS
SaveExploits0
Fedora
Fedora
added 2016/07/29 2:54 a.m.30 views

[SECURITY] Fedora 23 Update: golang-1.5.4-2.fc23

The Go Programming Language...

8.1CVSS1.8AI score0.0522EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/07/29 12:00 a.m.40 views

Fedora 24 : golang (2016-ea5e284d34) (httpoxy)

Security fix for CVE-2016-5386 AKA https://httpoxy.org/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

8.1CVSS6.8AI score0.0522EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/07/29 12:00 a.m.35 views

Fedora 23 : golang (2016-340e361b90) (httpoxy)

Security fix for CVE-2016-5386 AKA https://httpoxy.org/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

8.1CVSS6.8AI score0.0522EPSS
SaveExploits0References3
Fedora
Fedora
added 2016/07/28 11:58 p.m.41 views

[SECURITY] Fedora 24 Update: golang-1.6.3-1.fc24

The Go Programming Language...

8.1CVSS1.8AI score0.0522EPSS
SaveExploits0
OSV
OSV
added 2016/05/23 10:00 p.m.12 views

MGASA-2016-0207 Updated golang package fixes CVE-2016-3959

Updated golang packages fix security vulnerability: Go has an infinite loop in several big integer routines that makes Go programs vulnerable to remote denial of service attacks. Programs using HTTPS client authentication or the Go ssh server libraries are both exposed to this vulnerability...

7.5CVSS7.7AI score0.04419EPSS
SaveExploits0References3
Mageia
Mageia
added 2016/05/23 10:00 p.m.48 views

Updated golang package fixes CVE-2016-3959

Updated golang packages fix security vulnerability: Go has an infinite loop in several big integer routines that makes Go programs vulnerable to remote denial of service attacks. Programs using HTTPS client authentication or the Go ssh server libraries are both exposed to this vulnerability...

7.5CVSS1.7AI score0.04419EPSS
SaveExploits0References2
Rows per page
Query Builder