Описание
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | see notes |
| esm-infra/focal | not-affected | see notes |
| jammy | not-affected | see notes |
| noble | not-affected | see notes |
| questing | not-affected | see notes |
| resolute | not-affected | see notes |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | see notes |
| esm-apps-legacy/xenial | not-affected | see notes |
| esm-apps/bionic | not-affected | see notes |
| esm-apps/noble | not-affected | see notes |
| esm-apps/resolute | not-affected | see notes |
| esm-apps/xenial | not-affected | see notes |
| esm-infra/focal | not-affected | see notes |
| jammy | not-affected | see notes |
| noble | not-affected | see notes |
| questing | not-affected | see notes |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/jammy | released | 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2 |
| esm-apps/noble | released | 1:0.21.0+dfsg-1ubuntu0.1~esm2 |
| esm-apps/resolute | needed | |
| jammy | needed | |
| noble | needed | |
| questing | ignored | end of life, was needed |
| resolute | needed | |
| upstream | released | 0.45.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/bionic | released | 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 |
| esm-apps/focal | released | 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 |
| esm-infra-legacy/xenial | released | 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 |
| esm-infra/xenial | released | 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | see notes |
| esm-apps-legacy/xenial | not-affected | see notes |
| esm-apps/bionic | not-affected | see notes |
| esm-apps/xenial | not-affected | see notes |
| esm-infra/focal | not-affected | see notes |
| jammy | not-affected | see notes |
| noble | not-affected | see notes |
| questing | not-affected | see notes |
| resolute | not-affected | see notes |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/xenial | released | 2.3.7-0ubuntu0.16.04.1+esm2 |
| esm-infra/xenial | released | 2.3.7-0ubuntu0.16.04.1+esm2 |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/focal | not-affected | code not present |
| esm-infra-legacy/xenial | released | 2.0.11-0ubuntu1~16.04.4+esm2 |
| esm-infra/bionic | released | 3.0.3-0ubuntu1~18.04.2+esm2 |
| esm-infra/xenial | released | 2.0.11-0ubuntu1~16.04.4+esm2 |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
Ссылки на источники
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
The html.Parse function in golang.org/x/net/html has an infinite parsi ...
Уязвимость пакета golang-x-net языка программирования Golang, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.3 Medium
CVSS3