CVE-2020-28851 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-28851 Interim 1 26 2026-03-05T05:38:31Z current 2021-05-30T14:45:25Z 2026-03-05T05:38:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-28851 In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP2 aardvark-dns-1.0.1-27.module+el8.6.0+14673+621cb8be buildah-1.24.2-4.module+el8.6.0+14673+621cb8be buildah-tests-1.24.2-4.module+el8.6.0+14673+621cb8be cockpit-podman-43-1.module+el8.6.0+14673+621cb8be conmon-2.1.0-1.module+el8.6.0+14673+621cb8be container-selinux-2.179.1-1.module+el8.6.0+14673+621cb8be containernetworking-plugins-1.0.1-2.module+el8.6.0+14673+621cb8be containers-common-1-27.module+el8.6.0+14673+621cb8be crit-3.15-3.module+el8.6.0+14673+621cb8be criu-3.15-3.module+el8.6.0+14673+621cb8be criu-devel-3.15-3.module+el8.6.0+14673+621cb8be criu-libs-3.15-3.module+el8.6.0+14673+621cb8be crun-1.4.4-1.module+el8.6.0+14673+621cb8be fuse-overlayfs-1.8.2-1.module+el8.6.0+14673+621cb8be git-lfs-2.13.3-3.el8_6 go1.14 go1.14-doc go1.15 go1.15-doc go1.15-race libslirp-4.4.0-1.module+el8.6.0+14673+621cb8be libslirp-devel-4.4.0-1.module+el8.6.0+14673+621cb8be netavark-1.0.1-27.module+el8.6.0+14673+621cb8be oci-seccomp-bpf-hook-1.2.3-3.module+el8.6.0+14673+621cb8be podman-4.0.2-6.module+el8.6.0+14673+621cb8be podman-4.2.0-3.el9 podman-catatonit-4.0.2-6.module+el8.6.0+14673+621cb8be podman-docker-4.0.2-6.module+el8.6.0+14673+621cb8be podman-docker-4.2.0-3.el9 podman-gvproxy-4.0.2-6.module+el8.6.0+14673+621cb8be podman-gvproxy-4.2.0-3.el9 podman-plugins-4.0.2-6.module+el8.6.0+14673+621cb8be podman-plugins-4.2.0-3.el9 podman-remote-4.0.2-6.module+el8.6.0+14673+621cb8be podman-remote-4.2.0-3.el9 podman-tests-4.0.2-6.module+el8.6.0+14673+621cb8be podman-tests-4.2.0-3.el9 python3-criu-3.15-3.module+el8.6.0+14673+621cb8be python3-podman-4.0.0-1.module+el8.6.0+14673+621cb8be runc-1.0.3-2.module+el8.6.0+14673+621cb8be skopeo-1.6.1-2.module+el8.6.0+14673+621cb8be skopeo-tests-1.6.1-2.module+el8.6.0+14673+621cb8be slirp4netns-1.1.8-2.module+el8.6.0+14673+621cb8be toolbox-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be toolbox-tests-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be udica-0.2.6-2.module+el8.6.0+14673+621cb8be aardvark-dns-1.0.1-27.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 buildah-1.24.2-4.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 buildah-tests-1.24.2-4.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 cockpit-podman-43-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 conmon-2.1.0-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 container-selinux-2.179.1-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 containernetworking-plugins-1.0.1-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 containers-common-1-27.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 crit-3.15-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 criu-3.15-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 criu-devel-3.15-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 criu-libs-3.15-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 crun-1.4.4-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 fuse-overlayfs-1.8.2-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 git-lfs-2.13.3-3.el8_6 as a component of SUSE Liberty Linux 8 libslirp-4.4.0-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 libslirp-devel-4.4.0-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 netavark-1.0.1-27.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 oci-seccomp-bpf-hook-1.2.3-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-catatonit-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-docker-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-gvproxy-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-plugins-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-remote-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-tests-4.0.2-6.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 python3-criu-3.15-3.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 python3-podman-4.0.0-1.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 runc-1.0.3-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 skopeo-1.6.1-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 skopeo-tests-1.6.1-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 slirp4netns-1.1.8-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 toolbox-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 toolbox-tests-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 udica-0.2.6-2.module+el8.6.0+14673+621cb8be as a component of SUSE Liberty Linux 8 podman-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 podman-docker-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 podman-gvproxy-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 podman-plugins-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 podman-remote-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 podman-tests-4.2.0-3.el9 as a component of SUSE Liberty Linux 9 go1.14 as a component of SUSE CaaS Platform 4.0 go1.14-doc as a component of SUSE CaaS Platform 4.0 go1.15 as a component of SUSE CaaS Platform 4.0 go1.15-doc as a component of SUSE CaaS Platform 4.0 go1.15-race as a component of SUSE CaaS Platform 4.0 go1.14 as a component of SUSE Enterprise Storage 6 go1.15 as a component of SUSE Enterprise Storage 6 go1.14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS go1.14-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS go1.15 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS go1.15-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS go1.15-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS go1.14 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 go1.14-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 go1.15 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 go1.15-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 go1.15-race as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 go1.14 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 go1.14-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 go1.15 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 go1.15-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 go1.15-race as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 go1.14 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS go1.14-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS go1.15 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS go1.15-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS go1.15-race as a component of SUSE Linux Enterprise Server 15 SP1-LTSS go1.14 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 go1.15 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 go1.14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 go1.14-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 go1.15 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 go1.15-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 go1.15-race as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 go1.14 as a component of SUSE Manager Proxy 4.0 go1.15 as a component of SUSE Manager Proxy 4.0 go1.14 as a component of SUSE Manager Retail Branch Server 4.0 go1.15 as a component of SUSE Manager Retail Branch Server 4.0 go1.14 as a component of SUSE Manager Server 4.0 go1.15 as a component of SUSE Manager Server 4.0 In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.) CVE-2020-28851 SUSE Liberty Linux 8:aardvark-dns-1.0.1-27.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:buildah-1.24.2-4.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:buildah-tests-1.24.2-4.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:cockpit-podman-43-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:conmon-2.1.0-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:container-selinux-2.179.1-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:containernetworking-plugins-1.0.1-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:containers-common-1-27.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:crit-3.15-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:criu-3.15-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:criu-devel-3.15-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:criu-libs-3.15-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:crun-1.4.4-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:fuse-overlayfs-1.8.2-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:git-lfs-2.13.3-3.el8_6 SUSE Liberty Linux 8:libslirp-4.4.0-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:libslirp-devel-4.4.0-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:netavark-1.0.1-27.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:oci-seccomp-bpf-hook-1.2.3-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-catatonit-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-docker-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-gvproxy-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-plugins-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-remote-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:podman-tests-4.0.2-6.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:python3-criu-3.15-3.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:python3-podman-4.0.0-1.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:runc-1.0.3-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:skopeo-1.6.1-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:skopeo-tests-1.6.1-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:slirp4netns-1.1.8-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:toolbox-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:toolbox-tests-0.0.99.3-0.4.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 8:udica-0.2.6-2.module+el8.6.0+14673+621cb8be SUSE Liberty Linux 9:podman-4.2.0-3.el9 SUSE Liberty Linux 9:podman-docker-4.2.0-3.el9 SUSE Liberty Linux 9:podman-gvproxy-4.2.0-3.el9 SUSE Liberty Linux 9:podman-plugins-4.2.0-3.el9 SUSE Liberty Linux 9:podman-remote-4.2.0-3.el9 SUSE Liberty Linux 9:podman-tests-4.2.0-3.el9 SUSE CaaS Platform 4.0:go1.14 SUSE CaaS Platform 4.0:go1.14-doc SUSE CaaS Platform 4.0:go1.15 SUSE CaaS Platform 4.0:go1.15-doc SUSE CaaS Platform 4.0:go1.15-race SUSE Enterprise Storage 6:go1.14 SUSE Enterprise Storage 6:go1.15 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:go1.14 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:go1.14-doc SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:go1.15 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:go1.15-doc SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:go1.15-race SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.14 SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.14-doc SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15 SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-race SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.14 SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.14-doc SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15 SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-race SUSE Linux Enterprise Server 15 SP1-LTSS:go1.14 SUSE Linux Enterprise Server 15 SP1-LTSS:go1.14-doc SUSE Linux Enterprise Server 15 SP1-LTSS:go1.15 SUSE Linux Enterprise Server 15 SP1-LTSS:go1.15-doc SUSE Linux Enterprise Server 15 SP1-LTSS:go1.15-race SUSE Linux Enterprise Server Business Critical Linux 15 SP1:go1.14 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:go1.15 SUSE Linux Enterprise Server for SAP Applications 15 SP1:go1.14 SUSE Linux Enterprise Server for SAP Applications 15 SP1:go1.14-doc SUSE Linux Enterprise Server for SAP Applications 15 SP1:go1.15 SUSE Linux Enterprise Server for SAP Applications 15 SP1:go1.15-doc SUSE Linux Enterprise Server for SAP Applications 15 SP1:go1.15-race SUSE Manager Proxy 4.0:go1.14 SUSE Manager Proxy 4.0:go1.15 SUSE Manager Retail Branch Server 4.0:go1.14 SUSE Manager Retail Branch Server 4.0:go1.15 SUSE Manager Server 4.0:go1.14 SUSE Manager Server 4.0:go1.15 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L