PT-2018-3480 · Google +2 · Go +2

🗓️ 07 Sep 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Go crypto/x509 chain verification may cause denial of service; update to Go 1.10.6+ or 1.11.3+.

Reporter	Title	Published	Views	Family All 5984
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management	24 Oct 201911:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is affected by an issue with runc used by Docker	3 Nov 202122:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private for Data is affected by multiple vulnerabilties in Go Language (CVE-2018-16874, CVE-2018-16873, CVE-2018-16875)	3 Oct 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego	29 Aug 202321:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM License Key Server Administration & Reporting Tool and Agent	21 Dec 201905:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem model V840	18 Jun 201800:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to Golang Go (CVE-2022-41723)	13 Jul 202314:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Liberty affect IBM WIoTP MessageGateway	3 Jan 202021:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in ssh: Prefix truncation attack on Binary Packet Protocol (BPP)	26 Feb 202518:49	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb
github	www.github.com/Frichetten/CVE-2019-5736-PoC
github	www.github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c
github	www.github.com/q3k/cve-2019-5736-poc
github	www.github.com/twistlock/RunC-CVE-2019-5736
github	www.github.com/jas502n/CVE-2019-5736
github	www.github.com/agppp/cve-2019-5736-poc
github	www.github.com/alexzorin/poc-cve-2018-16875
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:11358-1

16 Oct 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.8 - 9.3

CVSS 37.5 - 9.8

CVSS 3.17.5 - 9.8

EPSS0.98452

SSVC

go language crypto x509 chain verification denial of service update to versions version 1.10.6 version 1.11.3