Gohttp Project Gohttp
4 CVEs affecting Gohttp Project Gohttp. Latest disclosed: 2019-05-20. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12160 | Critical | 9.8 | 2019-05-17 | GoHTTP through 2017-07-25 has a sendHeader use-after-free. |
CVE-2019-12158 | Critical | 9.8 | 2019-05-17 | GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension. |
CVE-2019-12198 | High | 7.5 | 2019-05-20 | In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header. |
CVE-2019-12159 | High | 7.5 | 2019-05-17 | GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL. |