Most recent entries from all

bdu:2021-02857

Withdrawn: BELL-CVE-2020-16845 — CVE-2020-16845 does not affect BellSoft software

Withdrawn by the publisher.

BIT-golang-2020-16845

Affected: Bitnami: golang

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

certfr-2023-avi-0976 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-0976

cnvd-2020-46848

EUVD-2026-43528

fkie_cve-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

Withdrawn: GHSA-q6gq-997w-f55g — Withdrawn Advisory: Infinite loop in xz

Withdrawn by the publisher.

Affected: Go: github.com/ulikunitz/xz

### Withdrawn Advisory This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time.

### Original Description Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

gsd-2020-16845

msrc_CVE-2020-16845 — Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binar…

msrc_CVE-2020-16845

openSUSE-SU-2020:1178-1 — Security update for go1.13

Security update for go1.13

RHBA-2020:4139 — Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 3scale-istio-adapter-rhel8-container update

golang: data race in certain net/http servers including ReverseProxy can lead to DoS golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

SUSE-SU-2020:2562-1 — Security update for go1.14

Security update for go1.14

UBUNTU-CVE-2020-16845

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

WID-SEC-W-2023-1599 — IBM Security Guardium: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.