Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-28851

Опубликовано: 02 янв. 2021
Источник: debian
EPSS Низкий

Описание

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
golang-golang-x-textfixed0.3.6-1package
golang-x-textremovedpackage
golang-x-textpostponedbusterpackage
golang-x-textno-dsastretchpackage

Примечания

  • https://github.com/golang/go/issues/42535

EPSS

Процентиль: 34%
0.00138
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
redhat
почти 5 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
nvd
почти 5 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
msrc
около 1 года назад

Описание отсутствует

github
больше 3 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

EPSS

Процентиль: 34%
0.00138
Низкий