Search CVE reports
61 – 63 of 63 results
CVE-2022-28327
Medium prioritySome fixes available 4 of 6
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
2 affected packages
golang-1.17, golang-1.18
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| golang-1.17 | Not in release | Needs evaluation | — | — | Ignored |
| golang-1.18 | Not in release | Fixed | Fixed | Fixed | Fixed |
CVE-2022-27536
Medium priorityCertificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.
2 affected packages
golang-1.17, golang-1.18
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| golang-1.17 | — | Not affected | — | — | Ignored |
| golang-1.18 | — | Not affected | Not affected | Not affected | Ignored |
CVE-2022-24675
Medium prioritySome fixes available 4 of 6
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
2 affected packages
golang-1.17, golang-1.18
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| golang-1.17 | Not in release | Needs evaluation | — | — | Ignored |
| golang-1.18 | Not in release | Fixed | Fixed | Fixed | Fixed |