5 matches found
SUSE SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3047-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3047-1 advisory. This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-27145: crypto/x509:...
BIT-GOLANG-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CVE-2026-42504
A vulnerability in the Golang mime package allows a Denial of Service (DoS) by consuming excessive CPU resources. The issue is triggered when decoding a maliciously-crafted MIME header containing numerous invalid encoded words. This flaw affects several software components including amazon-cloudw...