GoPistolet vulnerable to Improper Resource Shutdown or Release

ÉLEVÉE 7.5CVE-2015-10085 · GHSA-wr8h-w969-36m8 · GO-2023-1590 · Published 21/02/2023 · updated 17/06/2026

En bref

CVE-2015-10085 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant github.com/gopistolet/gopistolet, gopistolet (gopistolet project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.95%, plus élevée que 61.4% des vulnérabilités.
Correctif : mettre à jour vers 0.0.0-20210418093520-a5395f728f8d, 2015-10-27 ou plus récent.

Package	Affected versions	Patched versions
github.com/gopistolet/gopistolet Go	`< 0.0.0-20210418093520-a5395f728f8d`	`0.0.0-20210418093520-a5395f728f8d`
gopistolet gopistolet_project	`< 2015-10-27`	`2015-10-27`

Description

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The name of the patch is b91aa4674d460993765884e8463c70e6d886bc90. It is recommended to apply a patch to fix this issue. VDB-221506 is the identifier assigned to this vulnerability.

NVD description

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as b91aa4674d460993765884e8463c70e6d886bc90. It is recommended to apply a patch to fix this issue. VDB-221506 is the identifier assigned to this vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2015-10085 · ADVISORY
gopistolet/gopistolet#27 · WEB
gopistolet/gopistolet commit b91aa46 · WEB
gopistolet/gopistolet · PACKAGE
vuldb.com · WEB
vuldb.com · WEB
GitHub Advisory GHSA-wr8h-w969-36m8 · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

En bref

CVE-2015-10085 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant github.com/gopistolet/gopistolet, gopistolet (gopistolet project).

Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.95%, plus élevée que 61.4% des vulnérabilités.

Correctif : mettre à jour vers 0.0.0-20210418093520-a5395f728f8d, 2015-10-27 ou plus récent.

Package

Affected versions

Patched versions

github.com/gopistolet/gopistolet

< 0.0.0-20210418093520-a5395f728f8d

0.0.0-20210418093520-a5395f728f8d

gopistolet

gopistolet_project

< 2015-10-27

2015-10-27

Description

NVD description

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as b91aa4674d460993765884e8463c70e6d886bc90. It is recommended to apply a patch to fix this issue. VDB-221506 is the identifier assigned to this vulnerability.