CVE-2020-28362

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-11-18

Last modified

2024-08-04

Weaknesses

CWE-295

Affected products

• Fedora (Fedoraproject)
• Go (Golang)
• Cloud Insights Telegraf Agent (Netapp)
• Trident (Netapp)

References

• https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI
• https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontr…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LP…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2…
• https://security.netapp.com/advisory/ntap-20201202-0004/
• https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62