Security Advisory

CVE-2019-17596

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-24 21:07:25
Last updated 2024-08-05 01:47:13
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.