CVE-2019-12198

In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.

• CWE-125

• https://github.com/fekberg/GoHttp/issues/18Exploit, Issue Tracking, Third Party Advisory
• https://github.com/fekberg/GoHttp/issues/18Exploit, Issue Tracking, Third Party Advisory

Published

May 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12189An issue was discovered in Zoho ManageEngine ServiceDesk Plu…
• CVE-2019-1219An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-12190XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS W…
• CVE-2019-12193H3C H3Cloud OS all versions allows SQL injection via the ear…
• CVE-2019-12195TP-Link TL-WR840N v5 00000005 devices allow XSS via the netw…
• CVE-2019-12196A SQL injection vulnerability in /client/api/json/v2/nfarepo…
• CVE-2019-1220A security feature bypass vulnerability exists when Microsof…4.3
• CVE-2019-12203SilverStripe through 4.3.3 allows session fixation in the "c…6.3
• CVE-2019-12204In SilverStripe through 4.3.3, a missing warning about leavi…9.8
• CVE-2019-12205SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS…6.1
• CVE-2019-12206njs through 0.3.1, used in NGINX, has a heap-based buffer ov…
• CVE-2019-12207njs through 0.3.1, used in NGINX, has a heap-based buffer ov…