Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-17848

The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-17848
  • Golang » Net » Version: 2018-07-02
    cpe:2.3:a:golang:net:2018-07-02
  • Golang » Net » Version: 2018-07-06
    cpe:2.3:a:golang:net:2018-07-06
  • Golang » Net » Version: 2018-07-09
    cpe:2.3:a:golang:net:2018-07-09
  • Golang » Net » Version: 2018-07-10
    cpe:2.3:a:golang:net:2018-07-10
  • Golang » Net » Version: 2018-07-12
    cpe:2.3:a:golang:net:2018-07-12
  • Golang » Net » Version: 2018-07-13
    cpe:2.3:a:golang:net:2018-07-13
  • Golang » Net » Version: 2018-09-11
    cpe:2.3:a:golang:net:2018-09-11
  • Golang » Net » Version: 2018-09-17
    cpe:2.3:a:golang:net:2018-09-17
  • Golang » Net » Version: 2018-09-21
    cpe:2.3:a:golang:net:2018-09-21
  • Golang » Net » Version: 2018-09-25
    cpe:2.3:a:golang:net:2018-09-25
  • Fedoraproject » Fedora » Version: 28
    cpe:2.3:o:fedoraproject:fedora:28
  • Fedoraproject » Fedora » Version: 29
    cpe:2.3:o:fedoraproject:fedora:29


Products
Pricing
Contact Us

Shodan ® - All rights reserved