DeutschShown in its original language — a full translation is planned for a future version.
Golang Go: Mehrere Schwachstellen
view advisory published 2026-01-15
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-68121US | critical10.0 | — | ||
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed h… | ||||
| CVE-2025-68119US | — | — | ||
Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial (hg) installed, downloading modules from non-standard sour… | ||||
| CVE-2025-61731US | — | — | ||
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go… | ||||
| CVE-2025-61730US | — | — | ||
During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the s… | ||||
| CVE-2025-61728US | — | — | ||
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a ma… | ||||
| CVE-2025-61726US | — | — | ||
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum reques… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-22141 vom 2026-07-17external
- Oracle Linux Security Advisory ELSA-2026-22937 vom 2026-07-20external
- Oracle Linux Security Advisory ELSA-2026-23228 vom 2026-09-04external
- Oracle Linux Security Advisory ELSA-2026-3035 vom 2026-02-24external
- Oracle Linux Security Advisory ELSA-2026-3040 vom 2026-02-24external
- Oracle Linux Security Advisory ELSA-2026-3092 vom 2026-02-24external
- Oracle Linux Security Advisory ELSA-2026-35833 vom 2026-07-08external
- Oracle Linux Security Advisory ELSA-2026-38504 vom 2026-07-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan