Поиск уязвимостей
Количество 56
Количество 56
CVE-2019-6486
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
CVE-2019-6486
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 e ...
CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
CVE-2018-16875
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 d ...
openSUSE-SU-2019:1164-1
Security update for go1.11
GHSA-vj2x-6gjj-jvh2
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
ELSA-2019-4546
ELSA-2019-4546: kubernetes security update (IMPORTANT)
BDU:2019-00688
Уязвимость модуля crypto языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-8gx8-4ch8-vgp8
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
BDU:2020-01889
Уязвимость пакета crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
ELSA-2019-4551
ELSA-2019-4551: docker-engine security update (IMPORTANT)
ELSA-2019-4550
ELSA-2019-4550: docker-engine security update (IMPORTANT)
ALT-PU-2019-1113
ALT-PU-2019-1113: package `golang` update to version 1.11.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-6486 Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks. | 5% Низкий | 9 месяцев назад | |
| CVE-2019-6486 Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 e ... | CVSS3: 8.2 | 5% Низкий | почти 8 лет назад |
 | CVE-2018-16875 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. | CVSS3: 7.5 | 6% Низкий | почти 8 лет назад |
 | CVE-2018-16875 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. | CVSS3: 7.5 | 6% Низкий | почти 8 лет назад |
 | CVE-2018-16875 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. | CVSS3: 7.5 | 6% Низкий | почти 8 лет назад |
| CVE-2018-16875 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. | 6% Низкий | 2 месяца назад | |
| CVE-2018-16875 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 d ... | CVSS3: 7.5 | 6% Низкий | почти 8 лет назад |
 | openSUSE-SU-2019:1164-1 Security update for go1.11 | 5% Низкий | больше 7 лет назад | |
| GHSA-vj2x-6gjj-jvh2 Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks. | CVSS3: 8.2 | 5% Низкий | больше 4 лет назад |
| ELSA-2019-4546 ELSA-2019-4546: kubernetes security update (IMPORTANT) | 5% Низкий | больше 7 лет назад | |
 | BDU:2019-00688 Уязвимость модуля crypto языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 5% Низкий | почти 8 лет назад |
| GHSA-8gx8-4ch8-vgp8 The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. | CVSS3: 7.5 | 6% Низкий | больше 4 лет назад |
| BDU:2020-01889 Уязвимость пакета crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 6% Низкий | почти 8 лет назад |
| ELSA-2019-4551 ELSA-2019-4551: docker-engine security update (IMPORTANT) | больше 7 лет назад | ||
| ELSA-2019-4550 ELSA-2019-4550: docker-engine security update (IMPORTANT) | больше 7 лет назад | ||
| ALT-PU-2019-1113 ALT-PU-2019-1113: package `golang` update to version 1.11.5-alt1 | CVSS3: 8.2 | 5% Низкий | почти 8 лет назад |
Уязвимостей на страницу