https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 04:14:28 +0000 https://cve.radiocsirt.org/vuln/cve-2024-24789 <p><strong>Affected:</strong> Go standard library archive/zip, golang go</p> <p>The archive/zip package&#39;s handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.</p> <p><strong>Affected:</strong> Go standard library archive/zip, golang go</p> <p>The archive/zip package&#39;s handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.</p> https://cve.radiocsirt.org/vuln/cve-2024-24789 https://cve.radiocsirt.org/vuln/usn-6886-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: golang-1.21, Ubuntu:22.04:LTS: golang-1.21, Ubuntu:22.04:LTS: golang-1.22, Ubuntu:24.04:LTS: golang-1.21, Ubuntu:24.04:LTS: golang-1.22</p> <p>It was discovered that the Go net/http module did not properly handle the requests when request\&#39;s headers exceed MaxHeaderBytes. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45288)</p> <p>It was discovered that the Go net/http module did not properly validate the subdomain match or exact match of the initial domain. An attacker could possibly use this issue to read sensitive information. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45289)</p> <p>It was discovered that the Go net/http module did not properly validate the total size of the parsed form when parsing a multipart form. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45290)</p> <p>It was discovered that the Go crypto/x509 module did not properly handle a certificate chain which contains a certificate with an unknown public key algorithm. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-24783)</p> <p>It was discovered that the Go net/mail module did not properly handle comments within display names in the ParseAddressList function. An attacker could possibly use this issue to cause a panic resulting into a de…</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: golang-1.21, Ubuntu:22.04:LTS: golang-1.21, Ubuntu:22.04:LTS: golang-1.22, Ubuntu:24.04:LTS: golang-1.21, Ubuntu:24.04:LTS: golang-1.22</p> <p>It was discovered that the Go net/http module did not properly handle the requests when request\&#39;s headers exceed MaxHeaderBytes. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45288)</p> <p>It was discovered that the Go net/http module did not properly validate the subdomain match or exact match of the initial domain. An attacker could possibly use this issue to read sensitive information. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45289)</p> <p>It was discovered that the Go net/http module did not properly validate the total size of the parsed form when parsing a multipart form. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-45290)</p> <p>It was discovered that the Go crypto/x509 module did not properly handle a certificate chain which contains a certificate with an unknown public key algorithm. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-24783)</p> <p>It was discovered that the Go net/mail module did not properly handle comments within display names in the ParseAddressList function. An attacker could possibly use this issue to cause a panic resulting into a de…</p> https://cve.radiocsirt.org/vuln/usn-6886-1