Lucene search
GoogleOSV:GO-2020-0046HistoryApr 14, 2021 - 8:04 p.m.
Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig
2021-04-1420:04:52
Google
osv.dev
5
0.001 Low
EPSS
Percentile
51.0%
Due to a nil pointer dereference, a malformed XML Digital Signature can cause a panic during validation. If user supplied signatures are being validated, this may be used as a denial of service vector.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/russellhaering/gosaml2 | lt | 0.7.0 | |
| github.com/russellhaering/goxmldsig | lt | 1.1.1 |
Related
osv
osv
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
2022-11-15 19:05:07
veracode
veracode
Denial Of Service (DoS)
2020-11-06 06:29:59
Denial Of Service (DoS)
2020-08-24 08:30:10
github
github
cve
cve
CVE-2020-7731
2021-04-30 16:15:07
CVE-2020-7711
2020-08-23 14:15:09
cvelist
cvelist
CVE-2020-7731 Denial of Service (DoS)
2021-04-30 00:00:00
CVE-2020-7711 Denial of Service (DoS)
2020-08-23 00:00:00
nvd
nvd
CVE-2020-7731
2021-04-30 16:15:07
CVE-2020-7711
2020-08-23 14:15:09
ubuntucve
ubuntucve
CVE-2020-7711
2020-08-23 00:00:00
prion
prion
Null pointer dereference
2021-04-30 16:15:00
Null pointer dereference
2020-08-23 14:15:00
redhatcve
redhatcve
CVE-2020-7711
2020-08-24 04:48:49
debiancve
debiancve
CVE-2020-7711
2020-08-23 14:15:09