CVE-2019-17596

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key

published October 24, 2019

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04693 · 91.7th percentile
Published
2019-10-24T21:07Z
EPSS history
Timeline
  • 24 OCT 21:07Z
    Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key
    cvelistv5