Lucene search
PRIOn knowledge basePRION:CVE-2020-14039HistoryJul 17, 2020 - 4:15 p.m.
Design/Logic Flaw
2020-07-1716:15:00
PRIOn knowledge base
www.prio-n.com
9
In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Windows). Thus, X.509 certificate verification is incomplete.
References
lists.opensuse.org/opensuse-security-announce/2020-07/msg00077.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00082.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html
groups.google.com/forum/
groups.google.com/forum/
security.netapp.com/advisory/ntap-20200731-0005/
www.oracle.com/security-alerts/cpuApr2021.html
Related
cve
cve
CVE-2020-14039
2020-07-17 16:15:11
cvelist
cvelist
CVE-2020-14039
2020-07-17 15:43:33
veracode
veracode
Improper Signature Verification
2020-07-17 05:28:54
osv
osv
BIT-golang-2020-14039
2024-03-06 11:08:29
GO-2021-0140
2022-01-04 18:11:08
Certificate verification error on Windows in crypto/x509
2022-02-17 17:46:03
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0263-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1095-1)
2020-07-28 00:00:00
openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)
2020-07-27 00:00:00
debiancve
debiancve
CVE-2020-14039
2020-07-17 16:15:11
ubuntucve
ubuntucve
CVE-2020-14039
2020-07-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-14039 affecting package golang 1.13.11-
2021-07-08 21:56:48
nvd
nvd
CVE-2020-14039
2020-07-17 16:15:11
altlinux
altlinux
Security fix for the ALT Linux 9 package golang version 1.14.6-alt1
2020-07-27 00:00:00
Security fix for the ALT Linux 10 package golang version 1.14.6-alt1
2020-07-23 00:00:00
suse
suse
Security update for go1.13 (important)
2020-07-27 00:00:00
Security update for go1.13 (important)
2020-07-26 00:00:00
Security update for go1.14 (important)
2020-09-11 00:00:00
ibm
ibm
nessus
nessus
openSUSE Security Update : go1.13 (openSUSE-2020-1087)
2020-07-28 00:00:00
openSUSE Security Update : go1.13 (openSUSE-2020-1095)
2020-07-28 00:00:00
SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2020:2562-1)
2020-09-08 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00