Denial Of Service (DoS)

🗓️ 18 Apr 2023 10:56:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

Vulnerability in parsing HTTP headers causes memory exhaustion

Reporter	Title	Published	Views	Family All 373
FreeBSD	traefik -- Use of vulnerable Go modules net/http, net/textproto	10 Mar 202300:00	–	freebsd
FreeBSD	go -- multiple vulnerabilities	4 Apr 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to Golang Go ( CVE-2023-24534 )	29 Jan 202521:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2023-24534)	27 Jul 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to denial of service due to Go (CVE-2023-24534)	29 Jan 202521:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	2 Jan 202411:59	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2023-24536, CVE-2023-24537 and CVE-2023-24534 may affect IBM CICS TX Standard	9 May 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by multiple vulnerabilities in Golang Go	26 Jul 202320:48	–	ibm

Vulners

Node

golang goMatch1.19.7-r0go

AND

golang goMatch1.19.3-r0go

AND

golang goMatch1.19.4-r0go

AND

golang goMatch1.19.6-r0go

AND

golang goMatch1.19.5-r0go

AND

golang goMatch1.19.2-r0go

AND

alpinelinux alpine_linuxMatch3.17

hashicorp nomadMatch1.4.2-r1go

AND

hashicorp nomadMatch1.4.2-r2go

AND

hashicorp nomadMatch1.4.4-r0go

AND

hashicorp nomadMatch1.4.6-r0go

AND

hashicorp nomadMatch1.4.2-r0go

AND

alpinelinux alpine_linuxMatch3.17

hashicorp nomadMatch0.12.7-r0go

AND

hashicorp nomadMatch1.4.3-r1go

AND

hashicorp nomadMatch0.11.2-r1go

AND

hashicorp nomadMatch1.3.1-r0go

AND

hashicorp nomadMatch1.4.2-r0go

AND

hashicorp nomadMatch1.0.4-r1go

AND

hashicorp nomadMatch1.2.6-r1go

AND

hashicorp nomadMatch1.0.4-r0go

AND

hashicorp nomadMatch1.4.4-r0go

AND

hashicorp nomadMatch1.5.2-r0go

AND

hashicorp nomadMatch1.3.5-r2go

AND

hashicorp nomadMatch1.3.5-r1go

AND

hashicorp nomadMatch1.3.1-r1go

AND

hashicorp nomadMatch1.3.5-r0go

AND

hashicorp nomadMatch1.4.1-r0go

AND

hashicorp nomadMatch1.5.0-r0go

AND

hashicorp nomadMatch1.1.1-r0go

AND

hashicorp nomadMatch1.4.3-r2go

AND

hashicorp nomadMatch1.1.1-r3go

AND

hashicorp nomadMatch1.3.3-r0go

AND

hashicorp nomadMatch1.3.4-r0go

AND

hashicorp nomadMatch0.10.3-r0go

AND

hashicorp nomadMatch1.1.1-r1go

AND

hashicorp nomadMatch1.4.3-r0go

AND

hashicorp nomadMatch1.4.2-r1go

AND

hashicorp nomadMatch1.2.6-r0go

AND

hashicorp nomadMatch1.3.2-r1go

AND

hashicorp nomadMatch1.5.2-r1go

AND

hashicorp nomadMatch1.5.1-r0go

AND

hashicorp nomadMatch0.10.3-r1go

AND

hashicorp nomadMatch1.1.1-r2go

AND

alpinelinux alpine_linuxMatchedge

traefik traefikMatch2.9.6-r4go

AND

traefik traefikMatch2.4.8-r1go

AND

traefik traefikMatch2.8.4-r0go

AND

traefik traefikMatch2.9.4-r1go

AND

traefik traefikMatch2.8.5-r0go

AND

traefik traefikMatch2.8.1-r0go

AND

traefik traefikMatch2.6.3-r0go

AND

traefik traefikMatch2.6.1-r1go

AND

traefik traefikMatch2.9.6-r0go

AND

traefik traefikMatch2.6.3-r1go

AND

traefik traefikMatch2.8.0-r0go

AND

traefik traefikMatch2.8.1-r2go

AND

traefik traefikMatch2.1.6-r1go

AND

traefik traefikMatch2.8.5-r1go

AND

traefik traefikMatch2.4.8-r0go

AND

traefik traefikMatch2.9.4-r0go

AND

traefik traefikMatch2.8.4-r1go

AND

traefik traefikMatch2.1.9-r0go

AND

traefik traefikMatch2.4.7-r0go

AND

traefik traefikMatch2.9.6-r2go

AND

traefik traefikMatch2.6.2-r0go

AND

traefik traefikMatch2.1.8-r0go

AND

traefik traefikMatch2.9.4-r2go

AND

traefik traefikMatch2.7.1-r0go

AND

traefik traefikMatch2.6.6-r1go

AND

traefik traefikMatch2.7.0-r0go

AND

traefik traefikMatch2.6.1-r2go

AND

traefik traefikMatch2.1.6-r0go

AND

traefik traefikMatch2.9.6-r1go

AND

traefik traefikMatch2.8.1-r1go

AND

traefik traefikMatch2.2.0-r0go

AND

traefik traefikMatch2.6.6-r0go

AND

traefik traefikMatch2.9.6-r3go

AND

traefik traefikMatch2.9.1-r0go

AND

alpinelinux alpine_linuxMatchedge

golang github.com/golang/goRangego1.20rc1–go1.20.2go

golang github.com/golang/goRangego1.2rc2–go1.19.7go

Source	Link
pkg	www.pkg.go.dev/vuln/GO-2023-1704
github	www.github.com/golang/go/commit/d6759e7a059f4208f07aa781402841d7ddaaef96
github	www.github.com/golang/go/issues/59267
github	www.github.com/golang/go/issues/59268
github	www.github.com/golang/go/commit/3991f6c41c7dfd167e889234c0cf1d840475e93c
go	www.go.dev/cl/481994
go	www.go.dev/issue/58975
groups	www.groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
security	www.security.gentoo.org/glsa/202311-09
security	www.security.netapp.com/advisory/ntap-20230526-0007/

12 Feb 2025 19:31Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.5

EPSS0.00162

SSVC