CVE-2019-16276

Опубликовано: 30 сент. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html
Mailing List
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0101
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0329
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0652
Third Party Advisory
https://github.com/golang/go/issues/34540
Patch
Third Party Advisory
https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ
https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/
https://security.netapp.com/advisory/ntap-20191122-0004/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html
Mailing List
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0101
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0329
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0652
Third Party Advisory
https://github.com/golang/go/issues/34540
Patch
Third Party Advisory
https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия до 1.12.10 (исключая)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия от 1.13 (включая) до 1.13.1 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

Конфигурация 7

cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.15237

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-444

Связанные уязвимости

CVE-2019-16276

CVSS3: 7.5

ubuntu

больше 5 лет назад

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

CVE-2019-16276

CVSS3: 6.5

redhat

больше 5 лет назад

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

CVE-2019-16276

CVSS3: 7.5

msrc

9 месяцев назад

Описание отсутствует

CVE-2019-16276

CVSS3: 7.5

debian

больше 5 лет назад

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smugglin ...

GHSA-xv7j-jr8q-mhmm

github

около 3 лет назад

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

EPSS

Процентиль: 94%

0.15237

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-444