Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios such as traffic from a client to a server that verifies client certificates.

🗓️ 11 Sep 2024 07:00:00Reported by MicrosoftType

Go before 1.12.11 and 1.3.x before 1.13.2 may panic on invalid digital signature public key.

Reporter	Title	Published	Views	Family All 106
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Go	29 Aug 202008:59	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Go (CVE-2019-17596)	14 Feb 202023:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.	4 Feb 202121:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ certified container is vulnerable to a denial of service vulnerability in golang (CVE-2019-17596)	26 Feb 202016:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by vulnerabilities in Golang (CVE-2019-17596 CVE-2019-16276)	27 Feb 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: Go can panic upon an attempt to process network traffic on IBM Watson Machine Learning on CP4D	3 May 202115:14	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Automation Manager - Go (CVE-2019-17596)	4 May 202017:09	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package golang version 1.12.11-alt1	6 Nov 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package golang version 1.13.4-alt1	6 Nov 201900:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2024-2545 (ALAS-2024-2545)	15 May 202400:00	–	nessus