Lucene search
+L

32 matches found

UbuntuCve
UbuntuCve
•added 2021/08/02 7:15 p.m.•60 views

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

7.5CVSS6.7AI score0.03372EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/08/02 7:15 p.m.•7 views

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

7.5CVSS6.7AI score0.03372EPSS
SaveExploits1References4
CVE
CVE
•added 2021/08/02 6:55 p.m.•451 views

CVE-2021-33198

CVE-2021-33198 affects Go (golang) math/big.Rat SetString and UnmarshalText when handling very large exponents, potentially causing a panic. Validated sources note the issue exists in Go before 1.15.13 and in 1.16.x before 1.16.5. Remediation is to update Go to at least 1.15.13 or 1.16.5 (or late...

7.5CVSS6.6AI score0.03372EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/08/02 6:55 p.m.•2 views

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

8.7CVSS0.03372EPSS
SaveExploits1References12
AlpineLinux
AlpineLinux
•added 2021/08/02 6:55 p.m.•72 views

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

7.5CVSS7.8AI score0.03372EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•6 views

CVE-2021-33198: Undefined Security Weakness

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

7.5CVSS5.8AI score0.03372EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/07/01 12:00 a.m.•52 views

SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:2214-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2214-1 advisory. Update to 1.15.13. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names...

7.5CVSS6.6AI score0.03464EPSS
SaveExploits4References14
Tenable Nessus
Tenable Nessus
•added 2021/06/29 12:00 a.m.•42 views

SUSE SLED15 / SLES15 Security Update : go1.16 (SUSE-SU-2021:2186-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2186-1 advisory. Update to 1.16.5. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names bsc1187443. -...

7.5CVSS6.7AI score0.03464EPSS
SaveExploits4References14
Veracode
Veracode
•added 2021/06/05 9:59 p.m.•62 views

Denial Of Service (DoS)

go is vulnerable to denial of service. The vulnerability exists due to the SetString and UnmarshalText methods of math/big.Rat may cause the system to hang if it is passed with a very large exponent input...

7.5CVSS3.2AI score0.03372EPSS
SaveExploits1References4Affected Software23
Positive Technologies
Positive Technologies
•added 2021/02/19 12:00 a.m.•51 views

PT-2021-6082 · Google +7 · Go +7

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.15.13 Go versions 1.16.x prior to 1.16.5 Description: The issue is related to the math/big.Rat component and the UnmarshalText method in the Go programming language, which can lead to uncontrolled memory allocation. Thi...

9.8CVSS7.1AI score0.93547EPSS
SaveExploits16References215
OSV
OSV
•added 2020/03/11 4:15 p.m.•9 views

CVE-2020-10181

goform/formEMR30 in Sumavision Enhanced Multimedia Router EMR 3.0.4.27 allows creation of arbitrary users with elevated privileges administrator on a device, as demonstrated by a setString=newuseradministrator123456 request...

9.8CVSS5.9AI score0.14666EPSS
SaveExploits5References4
Positive Technologies
Positive Technologies
•added 2020/03/05 12:00 a.m.•4 views

PT-2020-6557

Name of the Vulnerable Software and Affected Versions Sumavision Enhanced Multimedia Router EMR version 3.0.4.27 Description The issue allows creation of arbitrary users with elevated privileges, specifically as administrators, on a device. This can be achieved through a request such as...

10CVSS0.14666EPSS
SaveExploits5References10
Rows per page
Query Builder