Vulnerabilities > CVE-2020-29510

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

golang

netapp

NVD

Published: 2020-12-14

Updated: 2021-01-30

Summary

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

Vulnerable Configurations

Part	Description	Count
Application	Golang Golang GO 0.0.0-20201203163018-Be400Aefbc4C Golang GO 1.0 Golang GO 1.0.1 Golang GO 1.0.2 Golang GO 1.0.3 Golang GO 1.1 Golang GO 1.1.1 Golang GO 1.1.2 Golang GO 1.2 Golang GO 1.2.1 Golang GO 1.2.2 Golang GO 1.3 Golang GO 1.3.1 Golang GO 1.3.2 Golang GO 1.3.3 Golang GO 1.4 Golang GO 1.4.1 Golang GO 1.4.2 Golang GO 1.4.3 Golang GO 1.5 Golang GO 1.5.1 Golang GO 1.5.2 Golang GO 1.5.3 Golang GO 1.5.4 Golang GO 1.6 Golang GO 1.6.1 Golang GO 1.6.2 Golang GO 1.6.3 Golang GO 1.6.4 Golang GO 1.7 Golang GO 1.7.1 Golang GO 1.7.2 Golang GO 1.7.3 Golang GO 1.7.4 Golang GO 1.7.5 Golang GO 1.7.6 Golang GO 1.8 Golang GO 1.8.1 Golang GO 1.8.2 Golang GO 1.8.3 Golang GO 1.8.4 Golang GO 1.8.5 Golang GO 1.8.6 Golang GO 1.8.7 Golang GO 1.9 Golang GO 1.9.1 Golang GO 1.9.2 Golang GO 1.9.3 Golang GO 1.9.4 Golang GO 1.9.5 Golang GO 1.9.6 Golang GO 1.9.7 Golang GO 1.10 Golang GO 1.10.1 Golang GO 1.10.2 Golang GO 1.10.3 Golang GO 1.10.4 Golang GO 1.10.5 Golang GO 1.10.6 Golang GO 1.10.7 Golang GO 1.10.8 Golang GO 1.11.0 Golang GO 1.11.1 Golang GO 1.11.2 Golang GO 1.11.3 Golang GO 1.11.4 Golang GO 1.11.5 Golang GO 1.11.6 Golang GO 1.11.7 Golang GO 1.11.8 Golang GO 1.11.9 Golang GO 1.11.10 Golang GO 1.11.11 Golang GO 1.11.12 Golang GO 1.11.13 Golang GO 1.12 Golang GO 1.12.0 Golang GO 1.12.1 Golang GO 1.12.2 Golang GO 1.12.3 Golang GO 1.12.4 Golang GO 1.12.5 Golang GO 1.12.6 Golang GO 1.12.7 Golang GO 1.12.8 Golang GO 1.12.9 Golang GO 1.12.10 Golang GO 1.12.11 Golang GO 1.12.12 Golang GO 1.12.13 Golang GO 1.12.14 Golang GO 1.12.15 Golang GO 1.12.16 Golang GO 1.12.17 Golang GO 1.13 Golang GO 1.13.1 Golang GO 1.13.2 Golang GO 1.13.3 Golang GO 1.13.4 Golang GO 1.13.5 Golang GO 1.13.6 Golang GO 1.13.7 Golang GO 1.13.8 Golang GO 1.13.9 Golang GO 1.13.10 Golang GO 1.13.11 Golang GO 1.13.13 Golang GO 1.13.15 Golang GO 1.14 Golang GO 1.14.0 Golang GO 1.14.1 Golang GO 1.14.2 Golang GO 1.14.3 Golang GO 1.14.5 Golang GO 1.14.7 Golang GO 1.14.8 Golang GO 1.14.12 Golang GO 1.14.14 Golang GO 1.15	185
Application	Netapp Netapp Trident -	1

Vulnerabilities > CVE-2020-29510 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-29510"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-29510