VDB

GCVE-110-MAGEIA-2020-173

GCVE-110-MAGEIA-2020-173
Advisory Published
Vulnetix · Advisory published April 15, 2020
Updated golang packages fix security vulnerability: An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit architectures. A remote attacker could exploit this by supplying a crafted x.509 certificate, or other ASN.1 structure, as either a client or server to crash vulnerable Go applications (CVE-2020-7919).

Affected Products

VendorProductVersionsPlatforms
Mageiagolang0 (affected), 1.12.17-1.mga7 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›