CVE-2019-17596
published 2019-10-24CVE-2019-17596: Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack…
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arista | cloudvision_portal | — | — |
| arista | cloudvision_portal | — | — |
| arista | cloudvision_portal | — | — |
| arista | cloudvision_portal | 2018.1.0 – 2018.2.3 | — |
| arista | eos | <= 4.23.1f | — |
| arista | mos | <= 0.25 | — |
| arista | terminattr | <= 1.7.2 | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| golang | go | >= 1.12 < 1.12.11 | 1.12.11 |
| golang | go | >= 1.13 < 1.13.2 | 1.13.2 |
| msrc | azl3_golang_1.23.7-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_golang_1.23.9-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_golang_1.24.3-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_python-tensorboard_2.11.0-3_on_azure_linux_3.0 | — | — |
| msrc | azl3_python-tensorboard_2.16.2-2_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
| redhat | developer_tools | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_server | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH