CVE-2019-17596

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

References

Affected packages

Git / github.com/golang/go

Affected ranges

Type

GIT

Repo

https://github.com/golang/go

Events

Introduced

05e77d41914d247a1e7caf37d7125ccaa5a53505

Fixed

ef74bfc859c918aeab796c2fa18f4a5dde862343

Introduced

cc8838d645b2b7026c1f3aaceb011775c5ca3a08

Fixed

72766093e6bd092eb18df3759055625ba8436484

Introduced

Last affected

edecc650ec95ac1a96d2312980e18d959f89835e

Database specific

{
    "versions": [
        {
            "introduced": "1.12"
        },
        {
            "fixed": "1.12.11"
        },
        {
            "introduced": "1.13"
        },
        {
            "fixed": "1.13.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.2"
        }
    ]
}

Affected versions

go1.*

go1.12

go1.12.1

go1.12.10

go1.12.2

go1.12.3

go1.12.4

go1.12.5

go1.12.6

go1.12.7

go1.12.9

go1.13

go1.13.1

go1.3beta1

go1.3beta2

go1.4beta1

go1.5beta1

go1.5beta2

go1.5beta3

go1.6beta1

go1.6beta2

go1.7

go1.7.1

go1.7.2

go1.7beta1

go1.7beta2

go1.7rc1

go1.7rc2

go1.7rc3

go1.7rc4

go1.7rc5

go1.7rc6

release.*

release.r56

Other

weekly

weekly.*

weekly.2009-11-06

weekly.2009-11-10

weekly.2009-11-10.1

weekly.2009-11-12

weekly.2009-11-17

weekly.2009-12-07

weekly.2009-12-09

weekly.2009-12-22

weekly.2010-01-05

weekly.2010-01-13

weekly.2010-01-27

weekly.2010-02-04

weekly.2010-02-17

weekly.2010-02-23

weekly.2010-03-04

weekly.2010-03-15

weekly.2010-03-22

weekly.2010-03-30

weekly.2010-04-13

weekly.2010-04-27

weekly.2010-05-04

weekly.2010-05-27

weekly.2010-06-09

weekly.2010-06-21

weekly.2010-07-01

weekly.2010-07-14

weekly.2010-07-29

weekly.2010-08-04

weekly.2010-08-11

weekly.2010-08-25

weekly.2010-09-06

weekly.2010-09-15

weekly.2010-09-22

weekly.2010-09-29

weekly.2010-10-13

weekly.2010-10-13.1

weekly.2010-10-20

weekly.2010-10-27

weekly.2010-11-02

weekly.2010-11-10

weekly.2010-11-23

weekly.2010-12-02

weekly.2010-12-08

weekly.2010-12-15

weekly.2010-12-15.1

weekly.2010-12-22

weekly.2011-01-06

weekly.2011-01-12

weekly.2011-01-19

weekly.2011-01-20

weekly.2011-02-01

weekly.2011-02-01.1

weekly.2011-02-15

weekly.2011-02-24

weekly.2011-03-07

weekly.2011-03-07.1

weekly.2011-03-15

weekly.2011-03-28

weekly.2011-04-04

weekly.2011-04-13

weekly.2011-04-27

weekly.2011-05-22

weekly.2011-06-02

weekly.2011-06-09

weekly.2011-06-16

weekly.2011-06-23

weekly.2011-07-07

weekly.2011-07-19

weekly.2011-07-29

weekly.2011-08-10

weekly.2011-08-17

weekly.2011-09-01

weekly.2011-09-07

weekly.2011-09-16

weekly.2011-09-21

weekly.2011-10-06

weekly.2011-10-18

weekly.2011-10-25

weekly.2011-10-26

weekly.2011-11-01

weekly.2011-11-02

weekly.2011-11-08

weekly.2011-11-09

weekly.2011-11-18

weekly.2011-12-01

weekly.2011-12-02

weekly.2011-12-06

weekly.2011-12-14

weekly.2011-12-22

weekly.2012-01-15

weekly.2012-01-20

weekly.2012-01-27

weekly.2012-02-07

weekly.2012-02-14

weekly.2012-02-22

weekly.2012-03-04

weekly.2012-03-13

weekly.2012-03-22

weekly.2012-03-27

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17596.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "30"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "2018.1.0"
            },
            {
                "last_affected": "2018.2.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2019.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2019.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2019.1.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.23.1f"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "0.25"
            }
        ]
    }
]