Scientific Linux Security Update : golang on (20170801)

The following packages have been upgraded to a later upstream version: golang 1.8.3. Security Fixes : - A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used...

Oracle Linux 7 : golang (ELSA-2017-1859)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1859 advisory. - fix CVE-2017-8932 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

golang security, bug fix, and enhancement update

1.8.3-1 - bump to 1.8.3 - fix CVE-2017-8932 - Resolves: rhbz1452616, rhbz1452241, rhbz1457169, rhbz1448346...

Fedora Update for golang FEDORA-2017-8f018a3d39

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : golang (RHSA-2017:1859)

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Fedora 26 : golang (2017-8f018a3d39)

Bump to 1.8.3 - Security fix for CVE-2017-8932 - add support for 28+bit OIDs in asn1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 26 Update: golang-1.8.3-2.fc26

The Go Programming Language...

Amazon Linux AMI : golang (ALAS-2017-857)

Golang: Elliptic curves carry propagation issue in x86-64 P-256. A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could use this flaw to extract private keys when static ECDH is used. CVE-2017-8932 C Tenable Network Security, Inc. The...

CHAOS Framework - Generate Payloads and Control Remote Machines

CHAOS Framework allows generate payloads and controls remote machines. DISCLAIMER The use of the CHAOS Framework is COMPLETE RESPONSIBILITY of the END-USER. Developer assumes NO liability and is NOT responsible for any misuse or damage caused by this program. FEATURES Windows Remote Control...

Medium: golang

Issue Overview: Golang: Elliptic curves carry propagation issue in x86-64 P-256. A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could use this flaw to extract private keys when static ECDH is used. CVE-2017-8932 Affected Packages: golan...

Updated golang packages fix security vulnerability

A carry propagation issue was found in the P-256 implementation for x86-64 in golang CVE-2017-8932...

MGASA-2017-0195 Updated golang packages fix security vulnerability

A carry propagation issue was found in the P-256 implementation for x86-64 in golang CVE-2017-8932...

Unsafe Signing Using A Broken Entropy Sources

crypto/ecdsa in github.com/golang/go is vulnerable to unsafe signing. It can happen because it uses a signing key generated using a broken entropy of rand...

Missing Certificate Request Signature Validation

crypto/x509 in github.com/golang/go is missing certificate request signature validation. The library does not check the binding of the private key i.e., signature validation to its corresponding entities' certificate...

Path Traversal Via NUL Characters

pkg/crypto in github.com/golang/go is susceptible to path traversal attacks. The attacks are possible because it does not properly handle the NUL bytes if any string arguments to syscall contain them. If the filename contains NUL bytes \x00 , it may allow access to a subdirectory or "root"...

Denial Of Service (DoS) Through Infinite Loop

compress/flate in github.com/golang/go is vulnerable to denial of service DoS attacks. An infinite loop can be triggered when flate is parsing malformed data from gzip...

Denial Of Service (DoS)

net/http in github.com/golang/go is vulnerable to denial of service DoS attacks. The attacks are possible because it does not check the range requests to make sure the total number of bytes in all the ranges is not larger than or equal to the size of the file...

Denial Of Service (DoS)

archive/tar in github.com/golang/go is vulnerable to denial of service DoS attacks. Using a .tar file, attackers can cause arbitrary panics through the sparseFileReader...

Denial Of Service (DoS) Through Infinite Loop

archive/tar in github.com/golang/go is vulnerable to denial of service DoS attacks. Using a .tar file, attackers can cause an infinite loop to be triggered through the sparseFileReader...