golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

높음 7.5CVE-2018-17143 · GHSA-fcf9-6fv2-fc5v · GO-2022-0193 · Published 17/09/2018 · updated 17/06/2026

요약

CVE-2018-17143은(는) golang.org/x/net, net (golang)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 2.8%, 전체 취약점의 86.3%보다 높음.
조치: 0.0.0-20180921000356-2f5d2388922f 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
golang.org/x/net Go	`< 0.0.0-20180921000356-2f5d2388922f`	`0.0.0-20180921000356-2f5d2388922f`
net golang	`≤ 2018-09-17`	No fix yet

Description

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call

NVD description

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.

References

golang.org/x/net의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

golang.org/x/net

< 0.0.0-20180921000356-2f5d2388922f

0.0.0-20180921000356-2f5d2388922f

net

golang

≤ 2018-09-17

No fix yet

Description

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call

NVD description

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.

golang.org/x/net의 다른 취약점

모두 보기 →