2666 matches found
Denial Of Service (DoS)
go is vulnerable to denial of service attacks. The vulnerability exists because, when calling Reader.Read on an archive containing a large number of concatenated 0-length compressed files may cause a panic due to stack exhaustion...
Denial Of Service (DoS)
go is vulnerable to denial of service. The vulnerability exists in Skip function in read.go due to a stack exhaustion in decoder.Skip which allows an attacker to cause an application crash...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerability exists in functions in parser.go because of a stack exhaustion which allows an attacker to cause an application crash...
OESA-2022-1756 libproxy security update
libproxy offers the following features: extremely small core footprint 35k. no external dependencies within libproxy core.libproxy plugins may have dependencies. only 3 functions in the stable external API. dynamic adjustment to changing network topology. a standard way of dealing with proxy...
AlmaLinux 8 : expat (5314) (ALSA-2022:5314)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5314 advisory. - In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element. CVE-2022-25313 ...
Uncontrolled Recursion
Overview std/io/fs is a Go standard library package std/io/fs Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion. Remediation Upgrade...
GO-2022-0526 Stack exhaustion when decoding certain messages in encoding/gob
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion...
Uncontrolled Recursion
Overview std/encoding/gob is a Go standard library package std/encoding/gob Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion...
Uncontrolled Recursion
Overview std/compress/gzip is a Go standard library package std/compress/gzip Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: via the Reader.Read function when processing an archive that contains a large number of concatenated zero-length...
GO-2022-0524 Stack exhaustion when reading certain archives in compress/gzip
Calling Reader.Read on an archive containing a large number of concatenated 0-length compressed files can cause a panic due to stack exhaustion...
GO-2022-0523 Stack exhaustion when unmarshaling certain documents in encoding/xml
Unmarshaling an XML document into a Go struct which has a nested field that uses the 'any' field tag can panic due to stack exhaustion...
Uncontrolled Recursion
Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion...
GO-2022-0522 Stack exhaustion on crafted paths in path/filepath
Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion...
GO-2022-0521 Stack exhaustion from deeply nested XML documents in encoding/xml
Calling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion...
GO-2022-0515 Stack exhaustion due to deeply nested types in go/parser
Calling any of the Parse functions on Go source code which contains deeply nested types or declarations can cause a panic due to stack exhaustion...
Mageia: Security Advisory (MGASA-2022-0262)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated golang packages fix security vulnerability
net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...
MGASA-2022-0262 Updated golang packages fix security vulnerability
net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...
CVE-2022-30635
A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...