[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fulq4ZBcAR2mYx21UqNiNeDSt_M22KLt9MH2OvNCZwvg":3,"g5a-risk:CVE-2018-17075":137},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":35,"weaknesses":79,"weaknessesCount":88,"isActivelyExploited":89,"cisaInfo":26,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":133,"notableEvents":134},"CVE-2018-17075","What is CVE-2018-17075?","The html package (aka x\u002Fnet\u002Fhtml) before 2018-07-13 in Go mishandles \"in frameset\" insertion mode, leading to a \"panic: runtime error\" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit.","The html package (aka x\u002Fnet\u002Fhtml) before 2018-07-13 in Go mishandles \"in frameset\" insertion mode, leading to a \"panic: runtime error\" for html.Parse of , , ...","2018-09-16T02:29:00.947","2023-11-07T02:54:09.923",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02774,[39,39,39,39,39,39,39],"High",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"golang","net","*","cpe:2.3:a:golang:net:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",3,[58,64,68,72,76],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fbugs.chromium.org\u002Fp\u002Fchromium\u002Fissues\u002Fdetail?id=829668","Chromium",[62,63],"Exploit","Third Party Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F27016","GitHub",[62,63],{"url":69,"source":66,"tags":70},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fnet\u002Fcommit\u002Faaf60122140d3fcf75376d319f0554393160eb50",[71,63],"Patch",{"url":73,"source":74,"tags":75},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON\u002F","Fedoraproject",[],{"url":77,"source":74,"tags":78},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK\u002F",[],[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable","Base","Simple",1,false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2018-17075? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-17075, a high severity cyber security vulnerability from 2018. The html package (aka x\u002Fnet\u002Fhtml) before 2018-07-13 in Go m...","CVE-2018-17075, CVE-2018-17075 vulnerability, CVE-2018-17075 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, golang security, fedoraproject security, net vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2018-17075",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-17075","Cybersecurity","CVE-2018-17075, CVE-2018-17075 vulnerability, CVE-2018-17075 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117,125],{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":120,"Negate":26,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":124},"F9BBF14E-E2FB-4D3A-BA89-8DDD52843A65","2018-07-12",{"Operator":26,"Negate":26,"Nodes":126},[127],{"Operator":120,"Negate":26,"CPEMatch":128},[129,131],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D100F7CE-FC64-4CC6-852A-6136D72DA419",[],[],{"lastModified":11,"cacheTime":136,"version":32},1792338636455,{"score":138,"band":139,"action":140,"scoredAt":141},49,"Medium","Plan remediation","2026-10-16T06:44:49.890778+00:00"]