golang-1.7 vulnerabilities

Known vulnerabilities in the golang-1.7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Uncontrolled Recursion	<1.7.4-2+deb9u5
H Integer Overflow or Wraparound	<1.7.4-2+deb9u5
C Unchecked Return Value	<1.7.4-2+deb9u5
H Resource Exhaustion	<1.7.4-2+deb9u4
M Improper Resource Shutdown or Release	<1.7.4-2+deb9u4
H Out-of-Bounds	<1.7.4-2+deb9u4
H Allocation of Resources Without Limits or Throttling	<1.7.4-2+deb9u4
L CVE-2021-29923	*
M Race Condition	<1.7.4-2+deb9u4
L Improper Certificate Validation	*
L Missing Authorization	*
L Arbitrary Code Injection	*
H Resource Exhaustion	<1.7.4-2+deb9u4
L Uncontrolled Recursion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Arbitrary Code Injection	*
M Incorrect Calculation	<1.7.4-2+deb9u3
L CVE-2020-29510	*
L CVE-2020-29511	*
L CVE-2020-29509	*
H Arbitrary Argument Injection	*
L Arbitrary Code Injection	*
L Cross-site Scripting (XSS)	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.7.4-2+deb9u2
M Race Condition	<1.7.4-2+deb9u2
H Interpretation Conflict	<1.7.4-2+deb9u3
H HTTP Request Smuggling	<1.7.4-2+deb9u3
L CVE-2019-14809	*
L Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
M CRLF Injection	<1.7.4-2+deb9u3
H Allocation of Resources Without Limits or Throttling	<1.7.4-2+deb9u1
L Improper Certificate Validation	*
H Improper Input Validation	<1.7.4-2+deb9u3
H Directory Traversal	<1.7.4-2+deb9u3
H OS Command Injection	<1.7.4-2+deb9u1
L Arbitrary Code Injection	*
L Cleartext Transmission of Sensitive Information	*
C CVE-2017-15041	<1.7.4-2+deb9u3
H File Descriptor Exhaustion	<1.7.4-1
L Incorrect Calculation	*

Vulnerability

Vulnerable Version

<1.7.4-2+deb9u5

<1.7.4-2+deb9u5

<1.7.4-2+deb9u5

<1.7.4-2+deb9u4

<1.7.4-2+deb9u4