Skip to content
OpenAdvisories
Unscored DLA-1664-1 1 CVE

golang - security update

Published Feb 6, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 golang 2:1.3.3-1+deb8u1

Vulnerabilities 1

  • Unscored —
    CVE-2019-6486

    Denial of service affecting P-521 and P-384 curves in crypto/elliptic

    Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

    golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go