Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5372
HistoryNov 03, 2017 - 8:16 a.m.

Denial Of Service (DoS) In SSL Alert Handling

2017-11-0308:16:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

github.com/golang/go is vulnerable to denial of service (DoS) in SSL alert handling (aka) SSL-Death-Alert. The attacks are possible due to a flaw in the way that SSL3_AL_WARNING are handled, consuming 100% CPU on the server. This vulnerability is related to CVE-2016-8610.