563 matches found
GO-2020-0046 Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig
Due to a nil pointer dereference, a malformed XML Digital Signature can cause a panic during validation. If user supplied signatures are being validated, this may be used as a denial of service vector...
PT-2021-12657 · Goxmldsig +1 · Goxmldsig +1
Name of the Vulnerable Software and Affected Versions: gosaml2 versions prior to 0.7.0 goxmldsig versions prior to 1.1.1 Description: The issue is caused by a nil-pointer dereference when validating malformed XML Digital Signatures, leading to a crash or panic. This can be used as a denial of...
Denial Of Service (DoS)
crypto/ssh in github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability is possible because of a nil pointer dereference in the component...
DEBIAN-CVE-2020-29652
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...
UBUNTU-CVE-2020-29652
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...
CVE-2020-29652
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...
CVE-2020-29652
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...
CVE-2020-29652
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...
CVE-2020-29652
CVE-2020-29652 : A nil pointer dereference in the golang.org/x/crypto/ssh component (affected through v0.0.0-20201203163018-be400aefbc4c for Go) can allow remote attackers to cause a denial of service against SSH servers. The Initial Description confirms this vulnerability, and connected IBM/IBM ...
PT-2020-6905
Name of the Vulnerable Software and Affected Versions golang.org/x/crypto/ssh versions through v0.0.0-20201203163018-be400aefbc4c Description A nil pointer dereference in the golang.org/x/crypto/ssh component for Go allows remote attackers to cause a denial of service against SSH servers. An...
PT-2020-16128 · Xmlquery · Xmlquery
Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
DEBIAN-CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
UBUNTU-CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
CVE-2020-7711
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...
Denial of Service (DoS)
Overview github.com/russellhaering/goxmldsig is a XML Digital Signatures implemented in pure Go. Affected versions of this package are vulnerable to Denial of Service DoS. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. Details Denial of Service DoS describ...
PT-2020-19733 · Russell Haering · Gosaml2 +1
Name of the Vulnerable Software and Affected Versions: github.com/russellhaering/goxmldsig versions prior to 1.1.1 github.com/russellhaering/gosaml2 versions prior to 0.7.0 Description: The issue is caused by a nil-pointer dereference when sending malformed XML signatures, leading to a crash. Thi...