CVSS: 7.8EPSS: 1%CPEs: 3EXPL: 0CVE-2023-29408 – Excessive resource consumption in golang.org/x/image/tiff
https://notcve.org/view.php?id=CVE-2023-29408
02 Aug 2023 — The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU. • https://go.dev/cl/514897 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-3978 – Improper rendering of text nodes in golang.org/x/net/html
https://notcve.org/view.php?id=CVE-2023-3978
02 Aug 2023 — Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security context of the hosting website once the URL is clicked. The f... • https://go.dev/cl/514896 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 2%CPEs: 5EXPL: 1CVE-2023-29409 – Large RSA keys can cause high CPU usage in crypto/tls
https://notcve.org/view.php?id=CVE-2023-29409
02 Aug 2023 — Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web... • https://github.com/mateusz834/CVE-2023-29409 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 1%CPEs: 2EXPL: 1CVE-2023-29406 – Insufficient sanitization of Host header in net/http
https://notcve.org/view.php?id=CVE-2023-29406
11 Jul 2023 — The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value. A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to v... • https://github.com/LuizGustavoP/EP3_Redes • CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') CWE-436: Interpretation Conflict •
CVSS: 10.0EPSS: 3%CPEs: 3EXPL: 0CVE-2023-29405 – Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
https://notcve.org/view.php?id=CVE-2023-29405
08 Jun 2023 — The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. Flags containing embedded spaces are mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in the argument of another flag. This only affects usage of the gccgo compiler. • https://go.dev/cl/501224 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 10.0EPSS: 3%CPEs: 3EXPL: 0CVE-2023-29404 – Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
https://notcve.org/view.php?id=CVE-2023-29404
08 Jun 2023 — The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. The arguments for a number of flags which are non-optional are incorrectly considered optional, allowing disallowed flags to be smuggled through the LDFLAGS sanitization. This affects usage of both the gc and gccgo compilers. • https://go.dev/cl/501225 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2023-29403 – Unsafe behavior in setuid/setgid binaries in runtime
https://notcve.org/view.php?id=CVE-2023-29403
08 Jun 2023 — On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may ... • https://go.dev/cl/501223 • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 10.0EPSS: 2%CPEs: 3EXPL: 0CVE-2023-29402 – Code injection via go command with cgo in cmd/go
https://notcve.org/view.php?id=CVE-2023-29402
08 Jun 2023 — The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted module which contains directories with newline characters in their names. Modules which are retrieved using the go command, i.e. via "go get", are not affected (modules retrieved using GOPATH-mode, i.e. GO111MODULE=off, may be affected). • https://go.dev/cl/501226 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-24539 – Improper sanitization of CSS values in html/template
https://notcve.org/view.php?id=CVE-2023-24539
11 May 2023 — Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input. A flaw was found in golang where angle brackets (<>) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS co... • https://go.dev/cl/491615 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-176: Improper Handling of Unicode Encoding •
CVSS: 10.0EPSS: 3%CPEs: 2EXPL: 0CVE-2023-24540 – Improper handling of JavaScript whitespace in html/template
https://notcve.org/view.php?id=CVE-2023-24540
11 May 2023 — Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution. A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in... • https://go.dev/cl/491616 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-176: Improper Handling of Unicode Encoding •