Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4848-1:D81AC
HistoryFeb 08, 2021 - 9:24 p.m.

[SECURITY] [DSA 4848-1] golang-1.11 security update

2021-02-0821:24:09
lists.debian.org
63
golang-1.11
denial of service
incorrect outputs
cve-2020-7919
cve-2020-15586
cve-2020-16845
cve-2021-3114
debian security advisory

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.042

Percentile

92.4%

JSON

Debian Security Advisory DSA-4848-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
February 08, 2021 https://www.debian.org/security/faq

Package : golang-1.11
CVE ID : CVE-2020-7919 CVE-2020-15586 CVE-2020-16845 CVE-2021-3114

Multiple security issues were discovered in the implementation of the
Go programming language, which could result in denial of service and
the P-224 curve implementation could generate incorrect outputs.

For the stable distribution (buster), these problems have been fixed in
version 1.11.6-1+deb10u4.

We recommend that you upgrade your golang-1.11 packages.

For the detailed security status of golang-1.11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/golang-1.11

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9armelgolang-1.8-src< 1.8.1-1+deb9u2golang-1.8-src_1.8.1-1+deb9u2_armel.deb
Debian10mipselgolang-1.11-go-dbgsym< 1.11.6-1+deb10u4golang-1.11-go-dbgsym_1.11.6-1+deb10u4_mipsel.deb
Debian9i386golang-1.7-src< 1.7.4-2+deb9u3golang-1.7-src_1.7.4-2+deb9u3_i386.deb
Debian10mipsgolang-1.11-go-dbgsym< 1.11.6-1+deb10u4golang-1.11-go-dbgsym_1.11.6-1+deb10u4_mips.deb
Debian10arm64golang-1.11-go< 1.11.6-1+deb10u4golang-1.11-go_1.11.6-1+deb10u4_arm64.deb
Debian9allgolang-1.8-doc< 1.8.1-1+deb9u2golang-1.8-doc_1.8.1-1+deb9u2_all.deb
Debian9i386golang-1.8-go< 1.8.1-1+deb9u2golang-1.8-go_1.8.1-1+deb9u2_i386.deb
Debian9i386golang-1.8-src< 1.8.1-1+deb9u2golang-1.8-src_1.8.1-1+deb9u2_i386.deb
Debian9arm64golang-1.7-go< 1.7.4-2+deb9u3golang-1.7-go_1.7.4-2+deb9u3_arm64.deb
Debian9i386golang-1.8-go< 1.8.1-1+deb9u3golang-1.8-go_1.8.1-1+deb9u3_i386.deb
Rows per page:
1-10 of 751

Related

openvas 22
osv 24
nessus 51
redhat 14
ibm 17
debian 2
mageia 2
suse 4
oraclelinux 4
fedora 5
alpinelinux 4
gitlab 1
debiancve 3
cvelist 4
ubuntucve 4
photon 4
prion 4
redhatcve 3
cbl_mariner 5
veracode 3
cve 3
github 2
cgr 1
nvd 4
wolfi 1
cloudfoundry 1
amazon 2
altlinux 2
freebsd 1
ubuntu 2
openvas
openvas
Debian: Security Advisory (DSA-4848-1)
2021-02-10 00:00:00
Debian: Security Advisory (DLA-2459-1)
2020-11-22 00:00:00
Mageia: Security Advisory (MGASA-2020-0325)
2022-01-28 00:00:00
osv
osv
golang-1.11 - security update
2021-02-08 00:00:00
golang-1.7 - security update
2020-11-21 00:00:00
golang-1.8 - security update
2020-11-21 00:00:00
nessus
nessus
Debian DSA-4848-1 : golang-1.11 - security update
2021-02-10 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.9 (RHSA-2021:1366)
2021-05-05 00:00:00
RHEL 7 / 8 : OpenShift Virtualization 4.9.0 RPMs (RHSA-2021:4103)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2021:4103) Moderate: OpenShift Virtualization 4.9.0 RPMs security and bug fix update
2021-11-02 13:25:34
(RHSA-2021:1366) Moderate: OpenShift Container Platform 4.7.9 packages and security update
2021-05-04 19:16:05
(RHSA-2021:0713) Low: OpenShift Container Platform 4.5.34 packages and security update
2021-03-11 04:33:08
ibm
ibm
Security Bulletin: Upgrade to IBP v2.5.1 to address recent concerns/issues with Golang versions other than 1.14.7
2020-12-04 16:07:39
Security Bulletin: IBM Cloud Pak for Integration Operators affected by multiple vulnerabilities
2020-10-02 13:03:47
Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.
2021-02-04 21:36:22
debian
debian
[SECURITY] [DLA 2459-1] golang-1.7 security update
2020-11-21 16:15:56
[SECURITY] [DLA 2460-1] golang-1.8 security update
2020-11-21 16:41:04
mageia
mageia
Updated golang packages fix security vulnerability
2020-08-18 20:41:27
Updated golang packages fix security vulnerability
2020-04-15 13:12:14
suse
suse
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.14 (important)
2020-09-11 00:00:00
Security update for go1.13 (moderate)
2020-08-12 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security update
2020-09-11 00:00:00
coredns cri-o cri-tools etcd flannel kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard olcne yq security update
2020-08-31 00:00:00
olcne conmon coredns cri-o cri-tools etcd flannel grafana helm istio kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard prometheus yq security update
2020-08-31 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: golang-1.14.7-1.fc32
2020-09-07 17:14:54
[SECURITY] Fedora 31 Update: golang-1.13.9-1.fc31
2020-04-09 18:19:14
[SECURITY] Fedora 31 Update: golang-1.13.15-1.fc31
2020-09-09 14:20:25
alpinelinux
alpinelinux
CVE-2020-7919
2020-03-16 21:15:12
CVE-2020-15586
2020-07-17 16:15:11
CVE-2020-16845
2020-08-06 18:15:13
gitlab
gitlab
Improper Certificate Validation
2021-06-23 00:00:00
debiancve
debiancve
CVE-2020-7919
2020-03-16 21:15:12
CVE-2020-15586
2020-07-17 16:15:11
CVE-2020-16845
2020-08-06 18:15:13
cvelist
cvelist
CVE-2020-7919
2020-03-16 20:55:31
CVE-2020-15586
2020-07-17 15:38:24
CVE-2020-16845
2020-08-06 17:03:33
ubuntucve
ubuntucve
CVE-2020-7919
2020-03-16 00:00:00
CVE-2020-15586
2020-07-17 00:00:00
CVE-2020-16845
2020-08-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0087
2020-05-09 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0238
2020-05-02 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0276
2020-08-25 00:00:00
prion
prion
Code injection
2020-03-16 21:15:00
Design/Logic Flaw
2020-07-17 16:15:00
Design/Logic Flaw
2020-08-06 18:15:00
redhatcve
redhatcve
CVE-2020-7919
2020-04-03 20:00:02
CVE-2020-15586
2021-08-15 06:10:24
CVE-2020-16845
2022-05-14 11:32:38
cbl_mariner
cbl_mariner
CVE-2020-15586 affecting package python-tensorboard for versions less than 2.16.2-1
2024-05-17 21:38:35
CVE-2020-15586 affecting package golang 1.13.11-
2021-07-08 21:56:48
CVE-2020-16845 affecting package golang 1.13.11-
2021-07-08 21:56:48
veracode
veracode
Denial Of Service (DoS)
2020-07-17 06:00:32
Denial Of Service (DoS)
2020-01-30 02:08:48
Denial Of Service (DoS)
2020-08-13 04:32:40
cve
cve
CVE-2020-7919
2020-03-16 21:15:12
CVE-2020-15586
2020-07-17 16:15:11
CVE-2020-16845
2020-08-06 18:15:13
github
github
Helm uses crypto package vulnerable to panic from malformed X.509 certificate
2021-06-23 18:02:39
Infinite loop in xz
2021-12-16 19:16:40
cgr
cgr
CVE-2020-7919 vulnerabilities
2024-05-19 03:07:16
nvd
nvd
CVE-2020-7919
2020-03-16 21:15:12
CVE-2020-15586
2020-07-17 16:15:11
CVE-2020-16845
2020-08-06 18:15:13
wolfi
wolfi
CVE-2020-7919 vulnerabilities
2024-09-30 03:53:08
cloudfoundry
cloudfoundry
CVE-2020-15586: Gorouter is vulnerable to DoS Attack via Expect: 100-continue requests | Cloud Foundry
2020-07-15 00:00:00
amazon
amazon
Medium: golang
2020-08-18 20:23:00
Medium: golang
2020-08-26 23:09:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.14.7-alt1
2020-08-10 00:00:00
Security fix for the ALT Linux 9 package golang version 1.14.7-alt1
2020-08-19 00:00:00
freebsd
freebsd
go -- encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs
2020-08-06 00:00:00
ubuntu
ubuntu
Go vulnerability
2022-11-15 00:00:00
Go vulnerability
2023-05-23 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.042

Percentile

92.4%

JSON
Related for DEBIAN:DSA-4848-1:D81AC
openvas22osv24nessus51redhat14ibm17debian2mageia2suse4oraclelinux4fedora5alpinelinux4gitlab1debiancve3cvelist4ubuntucve4photon4prion4redhatcve3cbl_mariner5veracode3cve3github2cgr1nvd4wolfi1cloudfoundry1amazon2altlinux2freebsd1ubuntu2