CVE-2019-14809
medium
CVSS v3
—
CVSS v2
—
VIR risk
5.5
Description
Incorrect parsing validation in net/url
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: arch — https://security.archlinux.org/ASA-201908-15
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| arch | fixed | 2:1.12.8-1 |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Go | stdlib | >=1.12.0-0,<1.12.8 | 1.11.13 |
References
Verify integrity in audit chain (admin only). AS-IS.