Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-17846

Опубликовано: 01 окт. 2018
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

The html package (aka x/net/html) through 2018-09-25 in Go mishandles

<math>
, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

needed

esm-infra-legacy/trusty

DNE

esm-infra/xenial

needed

focal

ignored

end of standard support, was needed

Показывать по

Ссылки на источники

EPSS

Процентиль: 69%
0.00592
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
больше 7 лет назад

The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.

CVSS3: 7.5
nvd
больше 7 лет назад

The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.

CVSS3: 7.5
debian
больше 7 лет назад

The html package (aka x/net/html) through 2018-09-25 in Go mishandles ...

CVSS3: 7.5
github
больше 2 лет назад

x/net/html Vulnerable to DoS During HTML Parsing

EPSS

Процентиль: 69%
0.00592
Низкий

5 Medium

CVSS2

7.5 High

CVSS3