Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-28851

Опубликовано: 02 янв. 2021
Источник: debian
EPSS Низкий

Описание

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
golang-golang-x-textfixed0.3.6-1package
golang-x-textremovedpackage
golang-x-textpostponedbusterpackage
golang-x-textno-dsastretchpackage

Примечания

  • https://github.com/golang/go/issues/42535

EPSS

Процентиль: 25%
0.00082
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
redhat
больше 4 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
nvd
больше 4 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS3: 7.5
msrc
9 месяцев назад

Описание отсутствует

github
около 3 лет назад

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

EPSS

Процентиль: 25%
0.00082
Низкий