Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-4968

Malware in sbrugna...

7.5CVSS6.8AI score0.04419EPSS
SaveExploits0References14
OSV
OSV
•added 2022/05/24 10:06 p.m.•48 views

GO-2022-0166 Denial of service due to unchecked parameters in crypto/dsa

The Verify function in crypto/dsa passed certain parameters unchecked to the underlying big integer library, possibly leading to extremely long-running computations, which in turn makes Go programs vulnerable to remote denial of service attacks. Programs using HTTPS client certificates or the Go...

7.5CVSS7.4AI score0.04419EPSS
SaveExploits0References4
OSV
OSV
•added 2016/05/23 7:59 p.m.•25 views

CVE-2016-3959

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

7.5CVSS7.3AI score
SaveExploits0References9
OSV
OSV
•added 2016/05/23 7:59 p.m.•29 views

UBUNTU-CVE-2016-3959

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

7.5CVSS6.8AI score0.04419EPSS
SaveExploits0References4
Prion
Prion
•added 2016/05/23 7:59 p.m.•35 views

Design/Logic Flaw

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

5CVSS6.9AI score0.04419EPSS
SaveExploits0References9Affected Software3
Mend
Mend
•added 2016/05/23 7:00 p.m.•5 views

CVE-2016-3959

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

8.7CVSS0.04419EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/23 12:00 a.m.•9 views

CVE-2016-3959: Improper Input Validation

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

7.5CVSS6.8AI score0.04419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/09/28 12:00 a.m.•7 views

PT-2016-5779

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.5.4 Go versions 1.6.x prior to 1.6.1 Description The issue arises from the Verify function in crypto/dsa/dsa.go not properly checking parameters passed to the big integer library. This could allow remote attackers to cau...

7.5CVSS0.04419EPSS
SaveExploits0References51
Rows per page
Query Builder