Описание
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
Ссылки
- Issue Tracking
- Issue Tracking
- Mailing List
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.52.0 (исключая)
cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*
EPSS
Процентиль: 40%
0.00473
Низкий
7.5 High
CVSS3
Дефекты
CWE-704
Связанные уязвимости
CVSS3: 7.5
ubuntu
4 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS3: 7.5
redhat
4 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS3: 7.5
msrc
4 месяца назад
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
CVSS3: 7.5
debian
4 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side p ...
EPSS
Процентиль: 40%
0.00473
Низкий
7.5 High
CVSS3
Дефекты
CWE-704