CVE-2019-12159

GoHTTP (up to 2017-07-25) contains a stack-based buffer over-read in the scan function invoked by getRequestType when processing a long URL. This is the concrete vulnerability described in CVE-2019-12159 and mirrored in multiple feeds (NVD, Red Hat, CVE lists). The available documents do not spec...

CVE-2019-12158

GoHTTP (up to 2017-07-25) contains a heap-based overflow in the GetExtension handling a long extension. The issue is documented across multiple sources (e.g., CVE-2019-12158 in NVD/Red Hat) as a heap overflow vulnerability affecting GoHTTP’s extension parsing. The connected documents confirm the ...

CVE-2019-12198

CVE-2019-12198 affects GoHttp (up to 2017-07-25). The vulnerability is a stack-based buffer over-read triggered by a long User-Agent header. Red Hat and NVD entries confirm the issue; no additional technical details (components, affected versions, root cause, exploit specifics, or fixes) are prov...

CVE-2019-12160

CVE-2019-12160 affects GoHTTP up to 2017-07-25, with a use-after-free in the sendHeader path. The issue is described consistently across NVD/Red Hat/NVD mirror entries; no exploit details or fixes are provided in the supplied documents. The CVSS data indicates a high to critical impact profile (n...