CVE-2019-14809

highpriority · track · 42EPSS 0.084 · 95 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

8.36% (95th) EPSS

CVSS 7.5 · high

Is it mine?

54 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can compose a crafted javascript:// URL that results in a hostname of google.com.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedgo-toolset-1.12-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-build-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-build-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-build-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-build-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-docs-0:1.12.8-2.el7.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-docs-0:1.12.8-2.el7.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-race-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-race-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-src-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-src-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-src-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-src-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-runtime-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-runtime-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-runtime-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Fixedgo-toolset-1.12-runtime-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2019:4179
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-build-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-build-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-build-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-build-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-bin-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-docs-0:1.12.8-2.el7.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-docs-0:1.12.8-2.el7.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-misc-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-race-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-race-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-src-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-src-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-src-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-src-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-golang-tests-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-runtime-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-runtime-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-runtime-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.
Workaroundgo-toolset-1.12-runtime-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
This flaw has no mitigation for any affected golang package versions.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · Red Hat Product Security US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-939US

affected products (54)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Fedora Project Fedora≤ 30fstec_bduRU
Fedora Project Fedora≤ 29fstec_bduRU
The Go Project Go≤ 1.11.13fstec_bduRU
The Go Project Go1.12.0 → 1.12.8fstec_bduRU
АО «Концерн ВНИИНС» ОС ОН «Стрелец»≤ 16.01.2023fstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.1fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 9fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 8fstec_bduRU
debian debian linux= 10.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
golang go< 1.11.13nvdUScpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
golang go1.12.0 → 1.12.8nvdUScpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
Go stdlib< 1.11.13osvUSpkg:golang/stdlib
Go stdlib1.12.0-0 → 1.12.8osvUSpkg:golang/stdlib
go-toolset-1.12-0:1.12.8-2.el7.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
go-toolset-1.12-0:1.12.8-2.el7.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
go-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
go-toolset-1.12-0:1.12.8-2.el7.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS
go-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
go-toolset-1.12-0:1.12.8-2.el7.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS

showing 20 of 54

advisories (2)

Vendor and ecosystem advisories describing this.

RHEA-2019:4179Red Hat Enhancement Advisory: new packages: go-toolset-1.122019-12-10csaf · redhat_csafUS
New go-toolset-1.12 packages are now available as a part of Red Hat Developer Tools for Red Hat Enterprise Linux.
GO-2022-0211Incorrect parsing validation in net/url2022-07-01vendor · osvUS
The url.Parse function accepts URLs with malformed hosts, such that the Host field can have arbitrary suffixes that appear in neither Hostname() nor Port(), allowing authorization bypasses in certain applications.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd osv redhat_csaf NVD CVE.org MITRE

published 2019-08-13modified 2026-06-17

references (50)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan