CVE-2018-17075

The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of…

published September 16, 2018

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>. This is related to HTMLTreeBuilder.cpp in WebKit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02774 · 86.2th percentile
Published
2018-09-16T02:00Z
EPSS history
Timeline
  • 16 SEP 02:00Z
    The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of…
    cvelistv5