ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-17596

PoC —
CVSS 3.1
7.5 high
EPSS
5%p91
Published
()
Modified
Description

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

Vendors
golangdebianfedoraprojectredhatopensusearista
Products
go, debian linux, fedora, developer tools, enterprise linux, enterprise linux server, leap, cloudvision portal, terminattr, eos, mos
Weakness
CWE-436
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news

No ingested article mentions this CVE yet.