Описание
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
Ссылки
- Issue Tracking
- Issue Tracking
- Mailing List
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.52.0 (исключая)
cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*
EPSS
Процентиль: 38%
0.00473
Низкий
7.5 High
CVSS3
Дефекты
CWE-704
Связанные уязвимости
CVSS3: 7.5
ubuntu
2 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS3: 7.5
redhat
3 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS3: 7.5
msrc
2 месяца назад
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
CVSS3: 7.5
debian
2 месяца назад
An incorrectly placed cast from bytes to int allowed for server-side p ...
CVSS3: 7.5
github
около 1 месяца назад
golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic
EPSS
Процентиль: 38%
0.00473
Низкий
7.5 High
CVSS3
Дефекты
CWE-704