Lucene search
+L

2900 matches found

Microsoft CVE
Microsoft CVE
•added 2020/08/18 7:00 a.m.•11 views

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers as demonstrated by the httputil.ReverseProxy Handler because it reads a request body and writes a response at the same time.

...

5.9CVSS7AI score0.02883EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2020/07/31 12:00 a.m.•45 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2020-1804)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.05299EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/07/30 12:00 a.m.•42 views

EulerOS 2.0 SP8 : golang (EulerOS-SA-2020-1804)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, becau...

7.8CVSS6.9AI score0.05299EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2020/07/28 12:00 a.m.•40 views

openSUSE Security Update : go1.13 (openSUSE-2020-1095)

This update for go1.13 fixes the following issues : - go1.13.14 released 2020/07/16 includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc1149259 go1.13 release tracking - go39925 net/http: panic on misformed If-None-Match Header with http.ServeContent ...

5.9CVSS6.5AI score0.02883EPSS
SaveExploits0References7
OSV
OSV
•added 2020/07/17 4:15 p.m.•36 views

CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.7AI score
SaveExploits0References14
OSV
OSV
•added 2020/07/17 4:15 p.m.•6 views

AZL-98934 CVE-2020-15586 affecting package golang 1.27.1-1

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.5AI score0.02883EPSS
SaveExploits0References1
NVD
NVD
•added 2020/07/17 4:15 p.m.•31 views

CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS0.02883EPSS
SaveExploits0References14
OSV
OSV
•added 2020/07/17 4:15 p.m.•13 views

AZL-79042 CVE-2020-15586 affecting package golang 1.25.7-1

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.8AI score0.02883EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/17 4:15 p.m.•6 views

DEBIAN-CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.8AI score0.02883EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2020/07/17 4:15 p.m.•31 views

CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.8AI score0.02883EPSS
SaveExploits0References2
OSV
OSV
•added 2020/07/17 4:15 p.m.•12 views

UBUNTU-CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.9AI score0.02883EPSS
SaveExploits0References3
Prion
Prion
•added 2020/07/17 4:15 p.m.•28 views

Design/Logic Flaw

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

4.3CVSS6.4AI score0.02883EPSS
SaveExploits0References14Affected Software6
Cvelist
Cvelist
•added 2020/07/17 3:38 p.m.•41 views

CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

6.7AI score0.02883EPSS
SaveExploits0References14
AlpineLinux
AlpineLinux
•added 2020/07/17 3:38 p.m.•52 views

CVE-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.9AI score0.02883EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/17 3:38 p.m.•50 views

CVE-2020-15586

Removed by vendor...

5.9CVSS7AI score0.02883EPSS
SaveExploits0
CVE
CVE
•added 2020/07/17 3:38 p.m.•457 views

CVE-2020-15586

CVE-2020-15586 affects Go before 1.13.13 and 1.14.x before 1.14.5, via a data race in certain net/http servers demonstrated by the httputil.ReverseProxy handler. The race occurs because a request body is read while a response is being written. Impact in the public documentation includes a potenti...

5.9CVSS6.8AI score0.02883EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
•added 2020/07/17 6:00 a.m.•38 views

Denial Of Service (DoS)

crypto/x509 is vulnerable to denial of service DoS. The attack is possible due to concurrent reading of the request body and writing of a response by the Handler, leading to data race and application crash...

5.9CVSS6.2AI score0.02883EPSS
SaveExploits0References20Affected Software90
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/17 12:00 a.m.•3 views

CVE-2020-15586: Concurrent Execution using Shared Resource with Improper Synchronization

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

5.9CVSS6.8AI score0.02883EPSS
SaveExploits0References2
RustSec
RustSec
•added 2020/05/27 12:00 p.m.•217 views

`LocalRequest::clone` creates multiple mutable references to the same object

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS4.1AI score0.00969EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2020/05/27 12:00 p.m.•48 views

RUSTSEC-2020-0028 `LocalRequest::clone` creates multiple mutable references to the same object

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS7.9AI score0.00969EPSS
SaveExploits1References3
Rows per page
Query Builder