Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-17846

The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-17846
  • Golang » Net » Version: 2018-07-02
    cpe:2.3:a:golang:net:2018-07-02
  • Golang » Net » Version: 2018-07-06
    cpe:2.3:a:golang:net:2018-07-06
  • Golang » Net » Version: 2018-07-09
    cpe:2.3:a:golang:net:2018-07-09
  • Golang » Net » Version: 2018-07-10
    cpe:2.3:a:golang:net:2018-07-10
  • Golang » Net » Version: 2018-07-12
    cpe:2.3:a:golang:net:2018-07-12
  • Golang » Net » Version: 2018-07-13
    cpe:2.3:a:golang:net:2018-07-13
  • Golang » Net » Version: 2018-09-11
    cpe:2.3:a:golang:net:2018-09-11
  • Golang » Net » Version: 2018-09-17
    cpe:2.3:a:golang:net:2018-09-17
  • Golang » Net » Version: 2018-09-21
    cpe:2.3:a:golang:net:2018-09-21
  • Golang » Net » Version: 2018-09-25
    cpe:2.3:a:golang:net:2018-09-25
  • Fedoraproject » Fedora » Version: 28
    cpe:2.3:o:fedoraproject:fedora:28
  • Fedoraproject » Fedora » Version: 29
    cpe:2.3:o:fedoraproject:fedora:29


Products
Pricing
Contact Us

Shodan ® - All rights reserved