1 matches found
golang: invalid public key causes panic in dsa.Verify
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates...
7.5CVSS7.3AI score0.04693EPSS
SaveExploits1References5
20