Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-16845
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
25.7%
CVSS Severity
CVSS v3 Score
7.5
CVSS v2 Score
5.0
References
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html
https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo
https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q
https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html
https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/
https://security.netapp.com/advisory/ntap-20200924-0002/
https://www.debian.org/security/2021/dsa-4848
https://www.oracle.com/security-alerts/cpuApr2021.html
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html
https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo
https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q
https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html
https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/
https://security.netapp.com/advisory/ntap-20200924-0002/
https://www.debian.org/security/2021/dsa-4848
https://www.oracle.com/security-alerts/cpuApr2021.html
Products affected by CVE-2020-16845
Golang
»
Go
»
Version:
N/A
cpe:2.3:a:golang:go:-
Golang
»
Go
»
Version:
0.0.0-20201203163018-be400aefbc4c
cpe:2.3:a:golang:go:0.0.0-20201203163018-be400aefbc4c
Golang
»
Go
»
Version:
1.0
cpe:2.3:a:golang:go:1.0
Golang
»
Go
»
Version:
1.0.1
cpe:2.3:a:golang:go:1.0.1
Golang
»
Go
»
Version:
1.0.2
cpe:2.3:a:golang:go:1.0.2
Golang
»
Go
»
Version:
1.0.3
cpe:2.3:a:golang:go:1.0.3
Golang
»
Go
»
Version:
1.1
cpe:2.3:a:golang:go:1.1
Golang
»
Go
»
Version:
1.1.1
cpe:2.3:a:golang:go:1.1.1
Golang
»
Go
»
Version:
1.1.2
cpe:2.3:a:golang:go:1.1.2
Golang
»
Go
»
Version:
1.10
cpe:2.3:a:golang:go:1.10
Golang
»
Go
»
Version:
1.10.1
cpe:2.3:a:golang:go:1.10.1
Golang
»
Go
»
Version:
1.10.2
cpe:2.3:a:golang:go:1.10.2
Golang
»
Go
»
Version:
1.10.3
cpe:2.3:a:golang:go:1.10.3
Golang
»
Go
»
Version:
1.10.4
cpe:2.3:a:golang:go:1.10.4
Golang
»
Go
»
Version:
1.10.5
cpe:2.3:a:golang:go:1.10.5
Golang
»
Go
»
Version:
1.10.6
cpe:2.3:a:golang:go:1.10.6
Golang
»
Go
»
Version:
1.10.7
cpe:2.3:a:golang:go:1.10.7
Golang
»
Go
»
Version:
1.10.8
cpe:2.3:a:golang:go:1.10.8
Golang
»
Go
»
Version:
1.11.0
cpe:2.3:a:golang:go:1.11.0
Golang
»
Go
»
Version:
1.11.1
cpe:2.3:a:golang:go:1.11.1
Golang
»
Go
»
Version:
1.11.10
cpe:2.3:a:golang:go:1.11.10
Golang
»
Go
»
Version:
1.11.11
cpe:2.3:a:golang:go:1.11.11
Golang
»
Go
»
Version:
1.11.12
cpe:2.3:a:golang:go:1.11.12
Golang
»
Go
»
Version:
1.11.13
cpe:2.3:a:golang:go:1.11.13
Golang
»
Go
»
Version:
1.11.2
cpe:2.3:a:golang:go:1.11.2
Golang
»
Go
»
Version:
1.11.3
cpe:2.3:a:golang:go:1.11.3
Golang
»
Go
»
Version:
1.11.4
cpe:2.3:a:golang:go:1.11.4
Golang
»
Go
»
Version:
1.11.5
cpe:2.3:a:golang:go:1.11.5
Golang
»
Go
»
Version:
1.11.6
cpe:2.3:a:golang:go:1.11.6
Golang
»
Go
»
Version:
1.11.7
cpe:2.3:a:golang:go:1.11.7
Golang
»
Go
»
Version:
1.11.8
cpe:2.3:a:golang:go:1.11.8
Golang
»
Go
»
Version:
1.11.9
cpe:2.3:a:golang:go:1.11.9
Golang
»
Go
»
Version:
1.12
cpe:2.3:a:golang:go:1.12
Golang
»
Go
»
Version:
1.12.0
cpe:2.3:a:golang:go:1.12.0
Golang
»
Go
»
Version:
1.12.1
cpe:2.3:a:golang:go:1.12.1
Golang
»
Go
»
Version:
1.12.10
cpe:2.3:a:golang:go:1.12.10
Golang
»
Go
»
Version:
1.12.11
cpe:2.3:a:golang:go:1.12.11
Golang
»
Go
»
Version:
1.12.12
cpe:2.3:a:golang:go:1.12.12
Golang
»
Go
»
Version:
1.12.13
cpe:2.3:a:golang:go:1.12.13
Golang
»
Go
»
Version:
1.12.14
cpe:2.3:a:golang:go:1.12.14
Golang
»
Go
»
Version:
1.12.15
cpe:2.3:a:golang:go:1.12.15
Golang
»
Go
»
Version:
1.12.16
cpe:2.3:a:golang:go:1.12.16
Golang
»
Go
»
Version:
1.12.17
cpe:2.3:a:golang:go:1.12.17
Golang
»
Go
»
Version:
1.12.2
cpe:2.3:a:golang:go:1.12.2
Golang
»
Go
»
Version:
1.12.3
cpe:2.3:a:golang:go:1.12.3
Golang
»
Go
»
Version:
1.12.4
cpe:2.3:a:golang:go:1.12.4
Golang
»
Go
»
Version:
1.12.5
cpe:2.3:a:golang:go:1.12.5
Golang
»
Go
»
Version:
1.12.6
cpe:2.3:a:golang:go:1.12.6
Golang
»
Go
»
Version:
1.12.7
cpe:2.3:a:golang:go:1.12.7
Golang
»
Go
»
Version:
1.12.8
cpe:2.3:a:golang:go:1.12.8
Golang
»
Go
»
Version:
1.12.9
cpe:2.3:a:golang:go:1.12.9
Golang
»
Go
»
Version:
1.13
cpe:2.3:a:golang:go:1.13
Golang
»
Go
»
Version:
1.13.1
cpe:2.3:a:golang:go:1.13.1
Golang
»
Go
»
Version:
1.13.10
cpe:2.3:a:golang:go:1.13.10
Golang
»
Go
»
Version:
1.13.11
cpe:2.3:a:golang:go:1.13.11
Golang
»
Go
»
Version:
1.13.13
cpe:2.3:a:golang:go:1.13.13
Golang
»
Go
»
Version:
1.13.2
cpe:2.3:a:golang:go:1.13.2
Golang
»
Go
»
Version:
1.13.3
cpe:2.3:a:golang:go:1.13.3
Golang
»
Go
»
Version:
1.13.4
cpe:2.3:a:golang:go:1.13.4
Golang
»
Go
»
Version:
1.13.5
cpe:2.3:a:golang:go:1.13.5
Golang
»
Go
»
Version:
1.13.6
cpe:2.3:a:golang:go:1.13.6
Golang
»
Go
»
Version:
1.13.7
cpe:2.3:a:golang:go:1.13.7
Golang
»
Go
»
Version:
1.13.8
cpe:2.3:a:golang:go:1.13.8
Golang
»
Go
»
Version:
1.13.9
cpe:2.3:a:golang:go:1.13.9
Golang
»
Go
»
Version:
1.14
cpe:2.3:a:golang:go:1.14
Golang
»
Go
»
Version:
1.14.0
cpe:2.3:a:golang:go:1.14.0
Golang
»
Go
»
Version:
1.14.1
cpe:2.3:a:golang:go:1.14.1
Golang
»
Go
»
Version:
1.14.2
cpe:2.3:a:golang:go:1.14.2
Golang
»
Go
»
Version:
1.14.3
cpe:2.3:a:golang:go:1.14.3
Golang
»
Go
»
Version:
1.14.5
cpe:2.3:a:golang:go:1.14.5
Golang
»
Go
»
Version:
1.2
cpe:2.3:a:golang:go:1.2
Golang
»
Go
»
Version:
1.2.1
cpe:2.3:a:golang:go:1.2.1
Golang
»
Go
»
Version:
1.2.2
cpe:2.3:a:golang:go:1.2.2
Golang
»
Go
»
Version:
1.3
cpe:2.3:a:golang:go:1.3
Golang
»
Go
»
Version:
1.3.1
cpe:2.3:a:golang:go:1.3.1
Golang
»
Go
»
Version:
1.3.2
cpe:2.3:a:golang:go:1.3.2
Golang
»
Go
»
Version:
1.3.3
cpe:2.3:a:golang:go:1.3.3
Golang
»
Go
»
Version:
1.4
cpe:2.3:a:golang:go:1.4
Golang
»
Go
»
Version:
1.4.1
cpe:2.3:a:golang:go:1.4.1
Golang
»
Go
»
Version:
1.4.2
cpe:2.3:a:golang:go:1.4.2
Golang
»
Go
»
Version:
1.4.3
cpe:2.3:a:golang:go:1.4.3
Golang
»
Go
»
Version:
1.5
cpe:2.3:a:golang:go:1.5
Golang
»
Go
»
Version:
1.5.1
cpe:2.3:a:golang:go:1.5.1
Golang
»
Go
»
Version:
1.5.2
cpe:2.3:a:golang:go:1.5.2
Golang
»
Go
»
Version:
1.5.3
cpe:2.3:a:golang:go:1.5.3
Golang
»
Go
»
Version:
1.5.4
cpe:2.3:a:golang:go:1.5.4
Golang
»
Go
»
Version:
1.6
cpe:2.3:a:golang:go:1.6
Golang
»
Go
»
Version:
1.6.1
cpe:2.3:a:golang:go:1.6.1
Golang
»
Go
»
Version:
1.6.2
cpe:2.3:a:golang:go:1.6.2
Golang
»
Go
»
Version:
1.6.3
cpe:2.3:a:golang:go:1.6.3
Golang
»
Go
»
Version:
1.6.4
cpe:2.3:a:golang:go:1.6.4
Golang
»
Go
»
Version:
1.7
cpe:2.3:a:golang:go:1.7
Golang
»
Go
»
Version:
1.7.1
cpe:2.3:a:golang:go:1.7.1
Golang
»
Go
»
Version:
1.7.2
cpe:2.3:a:golang:go:1.7.2
Golang
»
Go
»
Version:
1.7.3
cpe:2.3:a:golang:go:1.7.3
Golang
»
Go
»
Version:
1.7.4
cpe:2.3:a:golang:go:1.7.4
Golang
»
Go
»
Version:
1.7.5
cpe:2.3:a:golang:go:1.7.5
Golang
»
Go
»
Version:
1.7.6
cpe:2.3:a:golang:go:1.7.6
Golang
»
Go
»
Version:
1.8
cpe:2.3:a:golang:go:1.8
Golang
»
Go
»
Version:
1.8.1
cpe:2.3:a:golang:go:1.8.1
Golang
»
Go
»
Version:
1.8.2
cpe:2.3:a:golang:go:1.8.2
Golang
»
Go
»
Version:
1.8.3
cpe:2.3:a:golang:go:1.8.3
Golang
»
Go
»
Version:
1.8.4
cpe:2.3:a:golang:go:1.8.4
Golang
»
Go
»
Version:
1.8.5
cpe:2.3:a:golang:go:1.8.5
Golang
»
Go
»
Version:
1.8.6
cpe:2.3:a:golang:go:1.8.6
Golang
»
Go
»
Version:
1.8.7
cpe:2.3:a:golang:go:1.8.7
Golang
»
Go
»
Version:
1.9
cpe:2.3:a:golang:go:1.9
Golang
»
Go
»
Version:
1.9.1
cpe:2.3:a:golang:go:1.9.1
Golang
»
Go
»
Version:
1.9.2
cpe:2.3:a:golang:go:1.9.2
Golang
»
Go
»
Version:
1.9.3
cpe:2.3:a:golang:go:1.9.3
Golang
»
Go
»
Version:
1.9.4
cpe:2.3:a:golang:go:1.9.4
Golang
»
Go
»
Version:
1.9.5
cpe:2.3:a:golang:go:1.9.5
Golang
»
Go
»
Version:
1.9.6
cpe:2.3:a:golang:go:1.9.6
Golang
»
Go
»
Version:
1.9.7
cpe:2.3:a:golang:go:1.9.7
Debian
»
Debian Linux
»
Version:
10.0
cpe:2.3:o:debian:debian_linux:10.0
Debian
»
Debian Linux
»
Version:
9.0
cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject
»
Fedora
»
Version:
31
cpe:2.3:o:fedoraproject:fedora:31
Fedoraproject
»
Fedora
»
Version:
32
cpe:2.3:o:fedoraproject:fedora:32
Opensuse
»
Leap
»
Version:
15.1
cpe:2.3:o:opensuse:leap:15.1
Opensuse
»
Leap
»
Version:
15.2
cpe:2.3:o:opensuse:leap:15.2
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved