CVE-2019-17596
Fixed in a distro release EPSS 5%
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Products: golang go, debian_linux, fedoraproject fedora, redhat developer_tools, redhat enterprise_linux, redhat enterprise_linux_server, opensuse leap, arista cloudvision_portal, arista terminattr, arista eos, arista mos
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | stdlib | 1.12.11 |
| Go | stdlib | 1.13.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | golang | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-bin | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-docs | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-misc | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-race | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-src | 1.13.4-1.amzn2.0.1 |
| Amazon Linux 2 | golang-tests | 1.13.4-1.amzn2.0.1 |
| Arch Linux | go | 2:1.13.3-1 |
| Debian 10 | golang-1.11 | 1.11.6-1+deb10u3 |
| Debian 9 | golang-1.7 | 1.7.4-2+deb9u3 |
| Debian 9 | golang-1.8 | 1.8.1-1+deb9u3 |
| Red Hat devtools 2019 | go-toolset-1.12 | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-build | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-bin | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-docs | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-misc | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-race | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-src | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-tests | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-runtime | 0:1.12.12-4.el7 |
| Red Hat Enterprise Linux 8 | go-toolset | 0:1.12.12-2.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-bin | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-docs | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-misc | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-race | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-src | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-tests | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat openshift 4.3 | cri-o | 0:1.16.2-13.dev.rhaos4.3.gita83f883.el7 |
| Red Hat openshift 4.3 | cri-o | 0:1.16.2-15.dev.rhaos4.3.gita83f883.el8 |
| Red Hat openshift 4.3 | openshift | 0:4.3.1-202001310552.git.0.331f390.el8 |
| Red Hat openshift 4.3 | openshift | 0:4.3.1-202001310552.git.0.331f390.el7 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.1-202001310552.git.1.075d46a.el7 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.1-202001310552.git.1.075d46a.el8 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.1-202001310552.git.1.075d46a.el7 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.1-202001310552.git.1.075d46a.el8 |
| Red Hat openshift 4.3 | openshift-hyperkube | 0:4.3.1-202001310552.git.0.331f390.el7 |
| Red Hat openshift 4.3 | openshift-hyperkube | 0:4.3.1-202001310552.git.0.331f390.el8 |
| Red Hat openshift 4.3 | slirp4netns | 0:0.4.2-3.git21fdece.el8 |
| Red Hat openshift 4.3 | slirp4netns-debuginfo | 0:0.4.2-3.git21fdece.el8 |
| Red Hat openshift 4.3 | slirp4netns-debugsource | 0:0.4.2-3.git21fdece.el8 |
| Ubuntu 14.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.6 | no fix |
| Ubuntu 18.04 LTS | golang-1.10 | no fix |
| Ubuntu 18.04 LTS | golang-1.8 | no fix |
| Ubuntu 18.04 LTS | golang-1.9 | no fix |
| Ubuntu 20.04 LTS | golang-1.13 | 1.13.3-1ubuntu1 |
| openSUSE Leap 15.0 | go1.12 | 1.12.12-lp150.11.1 |
| openSUSE Leap 15.1 | go1.12 | 1.12.12-lp151.2.25.1 |
| openSUSE Tumbleweed | go1.12 | 1.12.17-4.8 |
| openSUSE Tumbleweed | go1.13 | 1.13.15-2.6 |
| openSUSE Tumbleweed | notary | 0.7.0-1.2 |