[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250363

 
 

909

 
 

196124

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2022-1863 --- go-rpm-macros

ID: oval:org.secpod.oval:def:1701039Date: (C)2022-10-27   (M)2024-02-26
Class: PATCHFamily: unix




A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid. A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input (CVE-2022-24675(CVE-2022-27191(CVE-2022-27664(CVE-2022-28131(((CVE-2022-28327(CVE-2022-29526(CVE-2022-30629(CVE-2022-30630(CVE-2022-30631(CVE-2022-30632(CVE-2022-30633(CVE-2022-30635(CVE-2022-32148

Platform:
Amazon Linux 2
Product:
go-rpm-macros
go-filesystem
go-srpm-macros
go-rpm-templates
Reference:
ALAS2-2022-1863
CVE-2022-1705
CVE-2022-1962
CVE-2022-1996
CVE-2022-24675
CVE-2022-27191
CVE-2022-27664
CVE-2022-28131
CVE-2022-28327
CVE-2022-29526
CVE-2022-30629
CVE-2022-30630
CVE-2022-30631
CVE-2022-30632
CVE-2022-30633
CVE-2022-30635
CVE-2022-32148
CVE    16
CVE-2022-1996
CVE-2022-27191
CVE-2022-1705
CVE-2022-1962
...

© SecPod Technologies