Security Advisory 0046

🗓️ 23 Mar 2020 00:00:00Reported by Arista Networks, IncType

Exposure of Arista’s products to CVE-2019-17596, panic upon processing network traffic with invalid DSA public key. Affected components: TerminAttr, OpenConfig, CVP Backend, and EOS

Reporter	Title	Published	Views	Family All 107
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Go	29 Aug 202008:59	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Go (CVE-2019-17596)	14 Feb 202023:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.	4 Feb 202121:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ certified container is vulnerable to a denial of service vulnerability in golang (CVE-2019-17596)	26 Feb 202016:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by vulnerabilities in Golang (CVE-2019-17596 CVE-2019-16276)	27 Feb 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: Go can panic upon an attempt to process network traffic on IBM Watson Machine Learning on CP4D	3 May 202115:14	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Automation Manager - Go (CVE-2019-17596)	4 May 202017:09	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package golang version 1.12.11-alt1	6 Nov 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package golang version 1.13.4-alt1	6 Nov 201900:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2024-2545 (ALAS-2024-2545)	15 May 202400:00	–	nessus

23 Mar 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.04693