Vulnerabilities

TI-2019-09108 CVE-2019-12198 · GHSA-p7c2-69hm-4w76

In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.

LOW 35

In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01266 Published 2019-05-20 No fix listed CWE-125

TI-2019-09079 CVE-2019-12160 · GHSA-4x6q-xv36-557v

MEDIUM 45

GoHTTP through 2017-07-25 has a sendHeader use-after-free.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01656 Published 2019-05-17 No fix listed CWE-416

TI-2019-09078 CVE-2019-12159 · GHSA-5qfc-f4p5-x2wm

LOW 36

GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01336 Published 2019-05-17 No fix listed CWE-125

TI-2019-09077 CVE-2019-12158 · GHSA-5gjv-852q-rc52

MEDIUM 45

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01575 Published 2019-05-17 No fix listed CWE-787