GCVE-110-MAGEIA-2017-19

Advisory Published

Vulnetix · Advisory published January 14, 2017

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	golang	0 (affected), 0 (affected), 1.6.4-1.mga5 (unaffected), 1.6.4-1.mga5 (unaffected)	—
Mageia	asterisk	0 (affected), 11.23.1-1.1.mga5 (unaffected)	—

References

Updated golang package fixes security vulnerability

advisory

Updated golang package fixes security vulnerability

issue

Updated asterisk packages fix upgrade error

advisory

Updated asterisk packages fix upgrade error

issue

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON