Lucene search
+L

1 matches found

OSV
OSV
added 2023/08/08 7:15 p.m.10 views

AZL-52773 CVE-2023-39533 affecting package golang for versions less than 1.19.12-1

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in th...

7.5CVSS7.1AI score0.01084EPSS
SaveExploits1References1
Rows per page
Query Builder