CVE-2019-12159

GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...

CVE-2019-12159

GoHTTP (up to 2017-07-25) contains a stack-based buffer over-read in the scan function invoked by getRequestType when processing a long URL. This is the concrete vulnerability described in CVE-2019-12159 and mirrored in multiple feeds (NVD, Red Hat, CVE lists). The available documents do not spec...

CVE-2019-12158

GoHTTP (up to 2017-07-25) contains a heap-based overflow in the GetExtension handling a long extension. The issue is documented across multiple sources (e.g., CVE-2019-12158 in NVD/Red Hat) as a heap overflow vulnerability affecting GoHTTP’s extension parsing. The connected documents confirm the ...

CVE-2019-12158

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...

CVE-2019-12159: Out-of-bounds Read

GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...

CVE-2019-12158: Out-of-bounds Write

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension...

PT-2019-12669

Name of the Vulnerable Software and Affected Versions GoHTTP versions prior to 2017-07-25 Description The issue is related to a use-after-free in the sendHeader function. Recommendations For versions prior to 2017-07-25, at the moment, there is no information about a newer version that contains a...

PT-2019-12667

Name of the Vulnerable Software and Affected Versions GoHTTP versions prior to 2017-07-25 Description The issue is related to a heap-based buffer overflow that can occur via a long extension in the GetExtension function. Recommendations For versions prior to 2017-07-25, at the moment, there is no...

CVE-2019-12160: Use After Free

GoHTTP through 2017-07-25 has a sendHeader use-after-free...

PT-2019-12668

Name of the Vulnerable Software and Affected Versions GoHTTP versions prior to 2017-07-25 Description The issue is related to a stack-based buffer over-read in the scan function, which is called from getRequestType, and can be triggered by a long URL. Recommendations For GoHTTP versions prior to...