CVE-2019-17596
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.7%
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.htmlhttps://access.redhat.com/errata/RHSA-2020:0101https://access.redhat.com/errata/RHSA-2020:0329https://github.com/golang/go/issues/34960https://groups.google.com/d/msg/golang-announce/lVEm7llp0w0/VbafyRkgCgAJhttps://lists.debian.org/debian-lts-announce/2021/03/msg00014.htmlhttps://lists.debian.org/debian-lts-announce/2021/03/msg00015.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VS3HPSE25ZSGS4RSOTADC67YNOHIGVV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVOWGM7IQGRO7DS2MCUMYZRQ4TYOZNAS/https://security.netapp.com/advisory/ntap-20191122-0005/https://www.arista.com/en/support/advisories-notices/security-advisories/10134-security-advisory-46