Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2020-14039
HistoryJul 17, 2020 - 4:15 p.m.

CVE-2020-14039

2020-07-1716:15:11
Debian Security Bug Tracker
security-tracker.debian.org
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.002 Low

EPSS

Percentile

65.1%

JSON

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Windows). Thus, X.509 certificate verification is incomplete.

OSVersionArchitecturePackageVersionFilename
Debian11allgolang-1.15< 1.15.15-1~deb11u4golang-1.15_1.15.15-1~deb11u4_all.deb

Related

cve 1
cvelist 1
veracode 1
prion 1
osv 4
openvas 8
ubuntucve 1
cbl_mariner 1
nvd 1
altlinux 2
suse 4
nessus 7
ibm 14
oracle 1
cve
cve
CVE-2020-14039
2020-07-17 16:15:11
cvelist
cvelist
CVE-2020-14039
2020-07-17 15:43:33
veracode
veracode
Improper Signature Verification
2020-07-17 05:28:54
prion
prion
Design/Logic Flaw
2020-07-17 16:15:00
osv
osv
GO-2021-0140
2022-01-04 18:11:08
BIT-golang-2020-14039
2024-03-06 11:08:29
Certificate verification error on Windows in crypto/x509
2022-02-17 17:46:03
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0263-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)
2020-07-27 00:00:00
openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1095-1)
2020-07-28 00:00:00
ubuntucve
ubuntucve
CVE-2020-14039
2020-07-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-14039 affecting package golang 1.13.11-
2021-07-08 21:56:48
nvd
nvd
CVE-2020-14039
2020-07-17 16:15:11
altlinux
altlinux
Security fix for the ALT Linux 9 package golang version 1.14.6-alt1
2020-07-27 00:00:00
Security fix for the ALT Linux 10 package golang version 1.14.6-alt1
2020-07-23 00:00:00
suse
suse
Security update for go1.13 (important)
2020-07-27 00:00:00
Security update for go1.13 (important)
2020-07-26 00:00:00
Security update for go1.14 (important)
2020-09-11 00:00:00
nessus
nessus
openSUSE Security Update : go1.13 (openSUSE-2020-1087)
2020-07-28 00:00:00
openSUSE Security Update : go1.13 (openSUSE-2020-1095)
2020-07-28 00:00:00
SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2020:2562-1)
2020-09-08 00:00:00
ibm
ibm
Security Bulletin: Golang Vulnerabilities in IBM Cloud CLI 1.1.0 or earlier
2020-08-20 19:29:57
Security Bulletin: GO security vulnerabilities on IBM Watson Machine Learning Server
2021-05-03 15:00:52
Security Bulletin: Go is vulnerable to a denial of service on IBM Watson Machine Learning on CP4D
2021-05-03 15:16:23
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.002 Low

EPSS

Percentile

65.1%

JSON
Related for DEBIANCVE:CVE-2020-14039
cve1cvelist1veracode1prion1osv4openvas8ubuntucve1cbl_mariner1nvd1altlinux2suse4nessus7ibm14oracle1