Lucene search
+L

54 matches found

CNVD
CNVD
added 2021/07/19 12:00 a.m.47 views

Google Golang Trust Management Issue Vulnerability

Google Golang is a statically strongly typed, compiled language from Google, U.S. A trust management issue vulnerability exists in Google Golang, which can be exploited by attackers to cause a TLS client panic...

6.5CVSS3.8AI score0.06975EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/15 2:15 p.m.2 views

DEBIAN-CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS6.2AI score0.06975EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/15 2:15 p.m.24 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS6.6AI score
SaveExploits0References16
NVD
NVD
added 2021/07/15 2:15 p.m.34 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS0.06975EPSS
SaveExploits1References16
ATTACKERKB
ATTACKERKB
added 2021/07/15 2:15 p.m.4 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS6.7AI score0.06975EPSS
SaveExploits1References26
AlpineLinux
AlpineLinux
added 2021/07/15 1:47 p.m.662 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS7.4AI score0.06975EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/07/15 1:47 p.m.31 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

7.2AI score0.06975EPSS
SaveExploits1References16
Debian CVE
Debian CVE
added 2021/07/15 1:47 p.m.41 views

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

6.5CVSS6.6AI score0.06975EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/07/14 12:00 a.m.193 views

FreeBSD : go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters (c365536d-e3cf-11eb-9d8d-b37b683944c2)

The Go project reports : crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected. The panic can be triggered by an attacker in a privileged network position without access to the server...

6.5CVSS6.8AI score0.06975EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2006/05/24 9:31 a.m.8 views

NFS client panic using O_DIRECT

The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service NFS client panic via unknown attack vectors related to the use of ODIRECT direct I/O...

2.1CVSS5.8AI score0.00412EPSS
SaveExploits0References4
NVD
NVD
added 2006/03/07 2:02 a.m.21 views

CVE-2006-0555

The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service NFS client panic via unknown attack vectors related to the use of ODIRECT direct I/O...

2.1CVSS5.9AI score0.00412EPSS
SaveExploits0References20
Prion
Prion
added 2006/03/07 2:02 a.m.29 views

Design/Logic Flaw

The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service NFS client panic via unknown attack vectors related to the use of ODIRECT direct I/O...

2.1CVSS6.1AI score0.00412EPSS
SaveExploits0References20Affected Software1
Cvelist
Cvelist
added 2006/03/07 2:00 a.m.38 views

CVE-2006-0555

The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service NFS client panic via unknown attack vectors related to the use of ODIRECT direct I/O...

5.8AI score0.00412EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2006/03/06 12:00 a.m.40 views

Fedora Core 4 : kernel-2.6.15-1.1833_FC4 (2006-131)

This update rebases to the latest -stable release 2.6.15.5, which fixes a number of security problems. - sysmbind failed to sanity check its arguments, leading to a potential local DoS. - A specially crafted ELF executable could cause Intel EM64T boxes to crash. CVE-2006-0741 - Normal users could...

2.1CVSS5.4AI score0.00412EPSS
SaveExploits0References4
Rows per page
Query Builder