https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:28:59 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2022-27536 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-27536 https://cve.radiocsirt.org/vuln/bit-golang-2022-27536 <p><strong>Affected:</strong> Bitnami: golang</p> <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> https://cve.radiocsirt.org/vuln/bit-golang-2022-27536 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0121 certfr-2023-avi-0121 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0121 https://cve.radiocsirt.org/vuln/euvd-2026-15366 EUVD-2026-15366 https://cve.radiocsirt.org/vuln/euvd-2026-15366 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27536 <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-27536 https://cve.radiocsirt.org/vuln/ghsa-vwmq-9gjc-2jjj <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> <p>Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.</p> https://cve.radiocsirt.org/vuln/ghsa-vwmq-9gjc-2jjj https://cve.radiocsirt.org/vuln/gsd-2022-27536 gsd-2022-27536 https://cve.radiocsirt.org/vuln/gsd-2022-27536 https://cve.radiocsirt.org/vuln/icsa-23-047-04 <p>ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation. Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field. net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests. Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion. encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.</p> <p>ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation. Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field. net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests. Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion. encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.</p> https://cve.radiocsirt.org/vuln/icsa-23-047-04 https://cve.radiocsirt.org/vuln/msrc_cve-2022-27536 msrc_CVE-2022-27536 https://cve.radiocsirt.org/vuln/msrc_cve-2022-27536 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11991-1 <p>go1.18-1.18.1-1.1 on GA media</p> <p>go1.18-1.18.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11991-1 https://cve.radiocsirt.org/vuln/suse-su-2022:1410-1 <p>Security update for go1.18</p> <p>Security update for go1.18</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1410-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0515 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0515