Количество 37
Количество 37
ROS-20241001-02
Множественные уязвимости golang
CVE-2023-29409
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
CVE-2023-29409
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
CVE-2023-29409
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
CVE-2023-29409
Extremely large RSA keys in certificate chains can cause a client/serv ...
GHSA-892h-r6cr-53g4
QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.
SUSE-SU-2023:3888-1
Security update for Golang Prometheus
SUSE-SU-2023:3886-1
Security update for grafana
SUSE-SU-2023:3263-1
Security update for go1.19
SUSE-SU-2023:3181-1
Security update for go1.20
GHSA-xc82-5m89-g4jv
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
BDU:2023-06242
Уязвимость пакета crypto/tls языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2023:3841-1
Security update for go1.19-openssl
SUSE-SU-2023:3840-1
Security update for go1.20-openssl
ELSA-2023-5738
ELSA-2023-5738: go-toolset and golang security and bug fix update (IMPORTANT)
SUSE-SU-2023:3868-1
Security update for SUSE Manager Client Tools
SUSE-SU-2023:3867-1
Security update for SUSE Manager Client Tools
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20241001-02 Множественные уязвимости golang | CVSS3: 8.8 | 9 месяцев назад | |
 | CVE-2023-29409 Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
 | CVE-2023-29409 Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
 | CVE-2023-29409 Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
| CVE-2023-29409 Extremely large RSA keys in certificate chains can cause a client/serv ... | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
| GHSA-892h-r6cr-53g4 QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2023:3888-1 Security update for Golang Prometheus | 0% Низкий | больше 1 года назад | |
| SUSE-SU-2023:3886-1 Security update for grafana | 0% Низкий | больше 1 года назад | |
| SUSE-SU-2023:3263-1 Security update for go1.19 | 0% Низкий | почти 2 года назад | |
| SUSE-SU-2023:3181-1 Security update for go1.20 | 0% Низкий | почти 2 года назад | |
| GHSA-xc82-5m89-g4jv Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
 | BDU:2023-06242 Уязвимость пакета crypto/tls языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
| SUSE-SU-2023:3841-1 Security update for go1.19-openssl | больше 1 года назад | ||
| SUSE-SU-2023:3840-1 Security update for go1.20-openssl | больше 1 года назад | ||
| ELSA-2023-5738 ELSA-2023-5738: go-toolset and golang security and bug fix update (IMPORTANT) | больше 1 года назад | ||
| SUSE-SU-2023:3868-1 Security update for SUSE Manager Client Tools | больше 1 года назад | ||
| SUSE-SU-2023:3867-1 Security update for SUSE Manager Client Tools | больше 1 года назад |
Уязвимостей на страницу