Vulnerability CVE-2020-28362: Information

Description

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-28362

Published: Nov. 18, 2020

Modified: Nov. 7, 2023

Error type identifier: CWE-295

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
golang	sisyphus	1.15.5-alt1	1.22.3-alt1	ALT-PU-2020-3356-1	262083	Fixed
golang	p10	1.15.5-alt1	1.21.10-alt1	ALT-PU-2020-3356-1	262083	Fixed
golang	p9	1.14.12-alt1	1.15.15-alt1	ALT-PU-2020-3319-1	261762	Fixed
golang	c10f1	1.15.5-alt1	1.21.10-alt1	ALT-PU-2020-3356-1	262083	Fixed
golang	c9f2	1.14.12-alt1	1.20.11-alt1	ALT-PU-2020-3334-1	261763	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI	Release Notes Third Party Advisory
https://security.netapp.com/advisory/ntap-20201202-0004/	Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62	Third Party Advisory
[trafficcontrol-issues] 20201112 [GitHub] [trafficcontrol] zrhoffman opened a new pull request #5278: Update Go version to 1.15.5
FEDORA-2020-864922e78a
FEDORA-2020-e971480183

Affected configurations:
1. Configuration 1
  cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
  End excliding
  1.14.12
  cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
  Start including
  1.15
  End excliding
  1.15.5
  
  Configuration 2
  cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  
  Configuration 3
  cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*
  cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: v24.5.1