Home

CVE-2019-17596

Description

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
2.34

Associated Vulnerability

VulnerabilityOS Platform
golang-1.11 security update(DSA-4551-1) golang-1.11_1.11.6-1+deb10u3_all.debLinux
(RHSA-2020:0329) go-toolset:rhel8 security update go-toolset-1.12.12-2.module+el8.1.0+5317+8a49ffbb.x86_64.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-1.12.12-4.module+el8.1.0+5317+8a49ffbb.x86_64.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-bin-1.12.12-4.module+el8.1.0+5317+8a49ffbb.x86_64.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-docs-1.12.12-4.module+el8.1.0+5317+8a49ffbb.noarch.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-misc-1.12.12-4.module+el8.1.0+5317+8a49ffbb.noarch.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-race-1.12.12-4.module+el8.1.0+5317+8a49ffbb.x86_64.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-src-1.12.12-4.module+el8.1.0+5317+8a49ffbb.noarch.rpmLinux
(RHSA-2020:0329) go-toolset:rhel8 security update golang-tests-1.12.12-4.module+el8.1.0+5317+8a49ffbb.noarch.rpmLinux
Interpretation Conflict Vulnerability (CVE-2019-17596)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234