Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-1000097

Опубликовано: 05 окт. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Darwin only]]
precise/esm

DNE

trusty

not-affected

Darwin only
trusty/esm

DNE

trusty was not-affected [Darwin only]
upstream

not-affected

Darwin only
vivid/ubuntu-core

not-affected

Darwin only
xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

Darwin only
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Darwin only]]
esm-infra/xenial

not-affected

Darwin only
precise/esm

DNE

trusty

not-affected

Darwin only
trusty/esm

DNE

trusty was not-affected [Darwin only]
upstream

not-affected

Darwin only
vivid/ubuntu-core

DNE

xenial

not-affected

Darwin only
zesty

not-affected

Darwin only

Показывать по

РелизСтатусПримечание
devel

not-affected

Darwin only
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Darwin only]]
precise/esm

DNE

trusty

not-affected

Darwin only
trusty/esm

DNE

trusty was not-affected [Darwin only]
upstream

not-affected

Darwin only
vivid/ubuntu-core

DNE

xenial

DNE

zesty

not-affected

Darwin only

Показывать по

РелизСтатусПримечание
devel

not-affected

Darwin only
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Darwin only
vivid/ubuntu-core

DNE

xenial

DNE

zesty

not-affected

Darwin only

Показывать по

РелизСтатусПримечание
devel

not-affected

Darwin only
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Darwin only
vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

EPSS

Процентиль: 39%
0.00177
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
около 9 лет назад

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

CVSS3: 7.5
nvd
больше 8 лет назад

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

msrc
5 месяцев назад

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

CVSS3: 7.5
debian
больше 8 лет назад

On Darwin, user's trust preferences for root certificates were not hon ...

CVSS3: 7.5
github
больше 3 лет назад

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

EPSS

Процентиль: 39%
0.00177
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-1000097