Google Go Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

1.17.027
1.17.127
1.17.226
1.17.324
1.17.424

Przeciwdziałanie

Official Fix80
Temporary Fix0
Workaround3
Unavailable0
Not Defined27

Wykorzystywanie

High1
Functional0
Proof-of-Concept0
Unproven1
Not Defined108

Wektor dostępu

Not Defined0
Physical0
Local4
Adjacent26
Network80

Uwierzytelnianie

Not Defined0
High0
Low33
None77

Interakcja z użytkownikiem

Not Defined0
Required9
None101

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤413
≤510
≤626
≤730
≤824
≤97
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤414
≤511
≤624
≤736
≤819
≤96
≤100

VulDB

≤10
≤20
≤32
≤420
≤56
≤646
≤73
≤832
≤91
≤100

NVD

≤10
≤20
≤30
≤41
≤50
≤610
≤77
≤841
≤95
≤107

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤81
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k15
<10k38
<25k56
<50k1
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k70
<2k9
<5k12
<10k15
<25k4
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (165): 0.1, 0.2, 0.3.3, 1.0, 1.0.2, 1.1, 1.1.1, 1.1.2, 1.2, 1.2.1, 1.2.2, 1.3, 1.3.1, 1.4, 1.4.1, 1.4.2, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.3, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.10rc1, 1.11, 1.11.1, 1.11.2, 1.11.3, 1.11.4, 1.11.5, 1.11.6, 1.11.7, 1.11.8, 1.11.9, 1.11.11, 1.11.12, 1.12, 1.12.1, 1.12.2, 1.12.3, 1.12.4, 1.12.5, 1.12.6, 1.12.7, 1.12.8, 1.12.9, 1.12.11, 1.12.12, 1.12.13, 1.12.14, 1.12.15, 1.13, 1.13.1, 1.13.2, 1.13.3, 1.13.4, 1.13.5, 1.13.6, 1.13.7, 1.13.8, 1.13.9, 1.13.11, 1.13.12, 1.13.13, 1.13.14, 1.14, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.14.11, 1.14.12, 1.14.13, 1.15, 1.15.1, 1.15.2, 1.15.3, 1.15.4, 1.15.5, 1.15.6, 1.15.7, 1.15.8, 1.15.9, 1.15.11, 1.15.12, 1.15.13, 1.15.14, 1.16, 1.16.1, 1.16.2, 1.16.3, 1.16.4, 1.16.5, 1.16.6, 1.16.7, 1.16.8, 1.16.9, 1.16.11, 1.16.12, 1.16.13, 1.16.14, 1.17, 1.17.1, 1.17.2, 1.17.3, 1.17.4, 1.17.5, 1.17.6, 1.17.7, 1.17.8, 1.17.9, 1.17.11, 1.17.12, 1.18, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.19, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.20.7, 1.20.8, 1.20.9, 1.20.11, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 2019-03-25

Link to Product Website: https://www.google.com/

Typ oprogramowania: Programming Language Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-12-065.65.5Google Go cmd-go weak encryption$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-45285
2023-12-063.73.6Google Go cmd-go weak encryption$5k-$25k$0-$5kNot DefinedOfficial Fix0.04
2023-12-064.84.7Google Go net-http information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-39326
2023-12-055.05.0Google Go math-big information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-45287
2023-11-097.37.0Google Go filepath-safefilepath directory traversal$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2023-45283
2023-10-125.35.1Google Go HTTP/2 Reset denial of service$5k-$25k$0-$5kHighOfficial Fix0.05CVE-2023-39325
2023-10-065.35.3Google Go Build privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2023-39323
2023-09-077.47.4Google Go crypto-tls memory corruption$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2023-39322
2023-09-075.55.5Google Go crypto-tls denial of service$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2023-39321
2023-09-077.67.6Google Go cmd-go privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.04CVE-2023-39320
2023-09-074.84.8Google Go html-template cross site scripting$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2023-39319
2023-09-074.84.8Google Go html-template cross site scripting$5k-$25k$0-$5kNot DefinedNot Defined0.02CVE-2023-39318
2023-06-096.76.7Google Go Remote Code Execution$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2023-29403
2022-12-095.35.3Google Go net-http denial of service$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-41717
2022-12-076.56.5Google Go http.Dir directory traversal$5k-$25k$5k-$25kNot DefinedNot Defined0.05CVE-2022-41720
2022-11-027.47.4Google Go Environment Variable exec.Cmd syscall.StartProcess Remote Code Execution$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2022-41716
2022-10-156.46.3Google Go Header ParseAcceptLanguage denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2022-32149
2022-10-157.47.2Google Go net-http privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-2880
2022-10-156.46.3Google Go Regular Expression denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-41715
2022-10-156.46.3Google Go File Header Reader.Read denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-2879
2022-09-148.58.5Google Go URL.JoinPath Remote Code Execution$5k-$25k$5k-$25kNot DefinedNot Defined0.08CVE-2022-32190
2022-08-117.37.0Google Go path-filepath Clean directory traversal$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-29804
2022-08-115.35.1Google Go math-big denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-32189
2022-08-115.95.8Google Go net-http httputil.ReverseProxy.ServeHTTP information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-32148
2022-08-116.46.3Google Go encoding-gob denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-30635

85 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Google

Might our Artificial Intelligence support you?

Check our Alexa App!