Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:42032
HistoryAug 04, 2023 - 3:29 a.m.

Denial Of Service (DoS)

2023-08-0403:29:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.001 Low

EPSS

Percentile

25.0%

JSON

github.com/golang/go is vulnerable to Denial Of Service (DoS). The vulnerability exists because handshake_client.go does not set a max RSA key size, which can lead to extremely large RSA keys in certificate chains causing a client to expend significant CPU time to verify signatures. The fix sets the maximum RSA key to 8192 bits.

Related

prion 1
nessus 74
ibm 17
openvas 18
cbl_mariner 3
cgr 1
redhatcve 1
osv 11
amazon 9
ubuntucve 1
debiancve 1
wolfi 1
alpinelinux 1
redhat 36
githubexploit 1
cve 1
cvelist 1
photon 3
almalinux 7
oraclelinux 7
rocky 1
avleonov 1
ics 1
gentoo 1
prion
prion
Code injection
2023-08-02 20:15:00
nessus
nessus
Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-308)
2023-08-24 00:00:00
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-310)
2023-08-24 00:00:00
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2023-307)
2023-08-24 00:00:00
ibm
ibm
Security Bulletin: IBM Storage Protect Server is susceptible to numerous vulnerabilities due to Golang Go (CVE-2023-29409)
2023-12-15 16:30:18
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2023-29409
2023-09-29 10:55:59
Security Bulletin: Operations Dashboard is vulnerable to denial of service due to Go
2023-11-03 17:49:09
openvas
openvas
openSUSE: Security Advisory for go1.19 (SUSE-SU-2023:3263-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3888-1)
2023-09-29 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2896)
2023-10-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-29409 affecting package msft-golang for versions less than 1.20.7-1
2024-05-18 03:07:22
CVE-2023-29409 affecting package golang for versions less than 1.20.7-1
2024-05-18 03:07:16
CVE-2023-29409 affecting package golang for versions less than 1.20.7-1
2024-05-18 03:07:22
cgr
cgr
CVE-2023-29409 vulnerabilities
2024-05-18 03:08:02
redhatcve
redhatcve
CVE-2023-29409
2023-08-07 05:18:51
osv
osv
Large RSA keys can cause high CPU usage in crypto/tls
2023-08-02 17:25:58
BIT-golang-2023-29409
2024-03-06 10:54:53
CVE-2023-29409
2023-08-02 20:15:11
amazon
amazon
Medium: nerdctl
2023-08-17 11:58:00
Medium: cri-tools
2023-08-31 22:28:00
Medium: golang
2023-08-17 11:58:00
ubuntucve
ubuntucve
CVE-2023-29409
2023-08-02 00:00:00
debiancve
debiancve
CVE-2023-29409
2023-08-02 20:15:11
wolfi
wolfi
CVE-2023-29409 vulnerabilities
2024-05-18 03:12:40
alpinelinux
alpinelinux
CVE-2023-29409
2023-08-02 20:15:11
redhat
redhat
(RHSA-2024:0292) Moderate: OpenShift Container Platform 4.14.10 security update
2024-01-23 21:34:26
(RHSA-2024:0293) Moderate: OpenShift Container Platform 4.14.10 packages and security update
2024-01-23 20:33:05
(RHSA-2023:5805) Important: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2023-10-17 17:30:59
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Golang Go
2023-08-21 15:59:26
cve
cve
CVE-2023-29409
2023-08-02 20:15:11
cvelist
cvelist
CVE-2023-29409 Large RSA keys can cause high CPU usage in crypto/tls
2023-08-02 19:47:23
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0066
2023-08-05 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0484
2023-10-05 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0644
2023-09-06 00:00:00
almalinux
almalinux
Important: go-toolset and golang security and bug fix update
2023-10-16 00:00:00
Moderate: runc security update
2023-12-12 00:00:00
Moderate: containernetworking-plugins security update
2023-12-12 00:00:00
oraclelinux
oraclelinux
runc security update
2023-12-14 00:00:00
go-toolset and golang security and bug fix update
2023-10-18 00:00:00
podman security update
2023-12-14 00:00:00
rocky
rocky
go-toolset and golang security and bug fix update
2023-10-24 18:37:03
avleonov
avleonov
October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture
2023-11-05 18:39:59
ics
ics
Siemens SIMATIC RTLS Locating Manager
2024-05-16 12:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00

0.001 Low

EPSS

Percentile

25.0%

JSON
Related for VERACODE:42032
prion1nessus74ibm17openvas18cbl_mariner3cgr1redhatcve1osv11amazon9ubuntucve1debiancve1wolfi1alpinelinux1redhat36githubexploit1cve1cvelist1photon3almalinux7oraclelinux7rocky1avleonov1ics1gentoo1