Lucene search
GoogleOSV:ALSA-2023:3083HistoryMay 16, 2023 - 12:00 a.m.
Moderate: go-toolset:rhel8 security and bug fix update
2023-05-1600:00:00
Google
osv.dev
8
go toolset
golang
security fix
bug fix
rhel8
cve-2022-41724
cve-2022-41725
denial of service
excessive resource consumption
cvss score
bz#2167412
bz#2174430
update
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.7%
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
- golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
- golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412)
- Update Go to 1.19.6 (BZ#2174430)
Related
nessus
nessus
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2023:3083)
2023-05-19 00:00:00
Rocky Linux 8 : go-toolset:Rocky Linux8 (RLSA-2023:3083)
2023-05-18 00:00:00
Oracle Linux 8 : go-toolset:ol8 (ELSA-2023-3083)
2023-05-25 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security and bug fix update
2023-05-25 00:00:00
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
skopeo security update
2023-11-11 00:00:00
osv
osv
Moderate: go-toolset:Rocky Linux8 security and bug fix update
2023-05-18 19:17:56
CVE-2022-41724
2023-02-28 18:15:10
BIT-golang-2022-41725
2024-03-06 10:57:26
almalinux
almalinux
Moderate: go-toolset:rhel8 security and bug fix update
2023-05-16 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
Moderate: buildah security update
2023-11-07 00:00:00
redhat
redhat
rocky
rocky
go-toolset:Rocky Linux8 security and bug fix update
2023-05-18 19:17:56
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2292)
2023-07-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-1822)
2023-05-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0869-1)
2023-03-28 00:00:00
ibm
ibm
freebsd
freebsd
go -- multiple vulnerabilities
2023-02-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.6-alt1
2023-02-22 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2023-03-24 08:55:49
alpinelinux
alpinelinux
CVE-2022-41725
2023-02-28 18:15:10
CVE-2022-41724
2023-02-28 18:15:10
veracode
veracode
Denial Of Service (DoS)
2023-02-18 18:51:32
Denial Of Service (DoS)
2023-02-18 18:28:03
cbl_mariner
cbl_mariner
CVE-2022-41725 affecting package golang 1.17.13-2
2024-07-03 03:08:33
CVE-2022-41725 affecting package msft-golang for versions less than 1.19.6-1
2024-07-03 03:08:37
CVE-2022-41725 affecting package golang for versions less than 1.19.5-1
2024-07-03 03:08:37
prion
prion
Design/Logic Flaw
2023-02-28 18:15:00
Design/Logic Flaw
2023-02-28 18:15:00
debiancve
debiancve
CVE-2022-41725
2023-02-28 18:15:10
CVE-2022-41724
2023-02-28 18:15:10
ubuntucve
ubuntucve
CVE-2022-41725
2023-02-28 00:00:00
CVE-2022-41724
2023-02-28 00:00:00
nvd
nvd
CVE-2022-41724
2023-02-28 18:15:10
CVE-2022-41725
2023-02-28 18:15:10
wolfi
wolfi
CVE-2022-41724 vulnerabilities
2024-07-03 09:08:38
CVE-2022-41725 vulnerabilities
2024-07-03 09:08:38
cgr
cgr
CVE-2022-41724 vulnerabilities
2024-05-19 03:07:16
CVE-2022-41725 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2022-41725
2023-03-15 05:13:48
CVE-2022-41724
2023-03-15 05:44:07
cvelist
cvelist
CVE-2022-41725 Excessive resource consumption in mime/multipart
2023-02-28 17:19:42
CVE-2022-41724 Panic on large handshake records in crypto/tls
2023-02-28 17:19:44
cve
cve
CVE-2022-41725
2023-02-28 18:15:10
CVE-2022-41724
2023-02-28 18:15:10
ubuntu
ubuntu
Go vulnerabilities
2023-06-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0362
2023-03-23 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0564
2023-04-06 00:00:00
amazon
amazon
Important: golang
2023-07-20 17:29:00
Important: golang
2023-04-13 19:28:00
Important: golang
2023-04-13 19:01:00
redos
redos
ROS-20240418-06
2024-04-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.7%
Related for OSV:ALSA-2023:3083