Lucene search
+L

13 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/30 6:24 p.m.•0 views

CLEANSTART-2024-MW10006 ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1

Security vulnerability affects the go package. ImportedSymbols in debug/macho for Open or OpenFat in Go before 1...

7.5CVSS6.6AI score0.04698EPSS
SaveExploits0References3
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•17 views

MAL-2025-28322 Malicious code in openfat (npm)

The package openfat was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•14 views

Malicious code in openfat (npm)

The package openfat was found to contain malicious code...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2022/05/10 2:02 p.m.•24 views

golang: debug/macho: invalid dynamic symbol table command can cause panic

An out of bounds read vulnerability was found in debug/macho of the Go standard library. When using the debug/macho standard library stdlib and malformed binaries are parsed using Open or OpenFat, it can cause golang to attempt to read outside of a slice array causing a panic when calling...

7.5CVSS6.8AI score0.04698EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2021/12/02 12:00 a.m.•54 views

openSUSE 15 Security Update : go1.17 (openSUSE-SU-2021:3833-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3833-1 advisory. - ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End...

7.5CVSS6.7AI score0.04698EPSS
SaveExploits0References8
Microsoft CVE
Microsoft CVE
•added 2021/11/11 8:00 a.m.•18 views

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer aka an out-of-bounds slice situation.

...

7.5CVSS7AI score0.04698EPSS
SaveExploits0
Prion
Prion
•added 2021/11/08 6:15 a.m.•38 views

Design/Logic Flaw

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

5CVSS7.4AI score0.04698EPSS
SaveExploits0References10Affected Software3
attackerkb
attackerkb
•added 2021/11/08 6:15 a.m.•6 views

CVE-2021-41771

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

7.5CVSS7AI score0.04698EPSS
SaveExploits0References13
osv_ubuntu
osv_ubuntu
•added 2021/11/08 6:15 a.m.•16 views

UBUNTU-CVE-2021-41771

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

7.5CVSS7AI score0.04698EPSS
SaveExploits0References6
CVE
CVE
•added 2021/11/08 12:00 a.m.•366 views

CVE-2021-41771

CVE-2021-41771 is an out-of-bounds read in the Go standard library, specifically ImportedSymbols in debug/macho when parsing malformed binaries with Open/OpenFat. This can cause a panic or denial of service by reading beyond a buffer. Technical details in connected advisories confirm the issue af...

7.5CVSS7AI score0.04698EPSS
SaveExploits0References10Affected Software1
Mend
Mend
•added 2021/11/08 12:00 a.m.•6 views

CVE-2021-41771

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

8.7CVSS0.04698EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•7 views

CVE-2021-41771: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

7.5CVSS6.6AI score0.04698EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•17 views

Google Go Buffer Overflow Vulnerability

Google Go is a statically strongly-typed, compiled, concurrently-typed, and garbage collected programming language from the U.S. company Google Google. A security vulnerability exists in ImportedSymbols, which stems from importing symbols for Open or OpenFat in Go's debug macho and accessing memo...

7.5CVSS6.9AI score0.04698EPSS
SaveExploits0References21
Rows per page
Query Builder