Skip to content
OpenAdvisories

Product · [UNKNOWN]

golang

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…

    [UNKNOWN] golang golang stdlib Ubuntu Azure Linux Go