TI-2019-09079 CVE-2019-12160 · GHSA-4x6q-xv36-557v
GoHTTP through 2017-07-25 has a sendHeader use-after-free.
Priority MEDIUM 45
GoHTTP through 2017-07-25 has a sendHeader use-after-free.
Gohttp Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Gohttp Project records in CISA KEVNo Gohttp Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2019-09077 CVE-2019-12158 · GHSA-5gjv-852q-rc52
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
Priority MEDIUM 45
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
TI-2019-09078 CVE-2019-12159 · GHSA-5qfc-f4p5-x2wm
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when…
Priority LOW 36
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.
TI-2019-09108 CVE-2019-12198 · GHSA-p7c2-69hm-4w76
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.
Priority LOW 35
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.