Vulnerability Database
Blog
FAQ
Docs
BIT-golang-2020-28362
See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/golang/BIT-golang-2020-28362.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-golang-2020-28362
Aliases
CVE-2020-28362
GO-2021-0069
Published
2024-03-06T11:07:49.873Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
References
https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI
https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/
https://security.netapp.com/advisory/ntap-20201202-0004/
https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62
Affected packages
Bitnami
/
golang
Package
Name
golang
Purl
pkg:bitnami/golang
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Calculator
Affected ranges
Type
SEMVER
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.14.12
Introduced
1.15.0
Fixed
1.15.5
BIT-golang-2020-28362 - OSV