Поиск уязвимостей
Количество 38
Количество 38
CVE-2021-39293
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
CVE-2021-39293
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
CVE-2021-39293
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted ...
RLSA-2021:3585
Moderate: go-toolset:rhel8 security update
GHSA-38h6-vxp4-qxvm
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.
ELSA-2021-3585
ELSA-2021-3585: go-toolset:ol8 security update (MODERATE)
BDU:2022-01896
Уязвимость компонентов net.ParseIP, net.ParseCIDR языка программирования Go, позволяющая нарушителю оказать воздействие на целостность данных
openSUSE-SU-2021:3292-1
Security update for go1.16
openSUSE-SU-2021:1342-1
Security update for go1.16
SUSE-SU-2021:3292-1
Security update for go1.16
SUSE-RU-2021:3315-1
Recommended update for go1.17
GHSA-j532-8pqq-78jr
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
ALT-PU-2021-3540
ALT-PU-2021-3540: package `docker-engine` update to version 20.10.11-alt1
ALT-PU-2021-2983
ALT-PU-2021-2983: package `docker-engine` update to version 20.10.9-alt1
ALT-PU-2021-3222
ALT-PU-2021-3222: package `golang` update to version 1.16.9-alt1
RLSA-2022:1819
Moderate: go-toolset:rhel8 security and bug fix update
ELSA-2022-1819
ELSA-2022-1819: go-toolset:ol8 security and bug fix update (MODERATE)
ALT-PU-2022-2873
ALT-PU-2022-2873: package `golang` update to version 1.18.7-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-39293 In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196. | CVSS3: 7.5 | 7% Низкий | около 5 лет назад |
 | CVE-2021-39293 In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196. | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад |
| CVE-2021-39293 In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted ... | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад |
 | RLSA-2021:3585 Moderate: go-toolset:rhel8 security update | 4% Низкий | около 5 лет назад | |
| GHSA-38h6-vxp4-qxvm Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR. | CVSS3: 7.5 | 4% Низкий | больше 4 лет назад |
| ELSA-2021-3585 ELSA-2021-3585: go-toolset:ol8 security update (MODERATE) | 4% Низкий | около 5 лет назад | |
 | BDU:2022-01896 Уязвимость компонентов net.ParseIP, net.ParseCIDR языка программирования Go, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 7.5 | 4% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:3292-1 Security update for go1.16 | 7% Низкий | около 5 лет назад | |
| openSUSE-SU-2021:1342-1 Security update for go1.16 | 7% Низкий | около 5 лет назад | |
| SUSE-SU-2021:3292-1 Security update for go1.16 | 7% Низкий | около 5 лет назад | |
| SUSE-RU-2021:3315-1 Recommended update for go1.17 | 7% Низкий | около 5 лет назад | |
| GHSA-j532-8pqq-78jr In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196. | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад |
| ALT-PU-2021-3540 ALT-PU-2021-3540: package `docker-engine` update to version 20.10.11-alt1 | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад |
| ALT-PU-2021-2983 ALT-PU-2021-2983: package `docker-engine` update to version 20.10.9-alt1 | CVSS3: 7.5 | 7% Низкий | около 5 лет назад |
| ALT-PU-2021-3222 ALT-PU-2021-3222: package `golang` update to version 1.16.9-alt1 | CVSS3: 9.8 | около 5 лет назад | |
| RLSA-2022:1819 Moderate: go-toolset:rhel8 security and bug fix update | больше 4 лет назад | ||
| ELSA-2022-1819 ELSA-2022-1819: go-toolset:ol8 security and bug fix update (MODERATE) | больше 4 лет назад | ||
| ALT-PU-2022-2873 ALT-PU-2022-2873: package `golang` update to version 1.18.7-alt1 | CVSS3: 9.8 | около 4 лет назад |
Уязвимостей на страницу