Lucene search
RedosROS-20240702-04HistoryJul 02, 2024 - 12:00 a.m.
ROS-20240702-04
2024-07-0200:00:00
redos.red-soft.ru
2
golang
vulnerability
remote attackers
denial of service
tls certificates
6.7 Medium
AI Score
Confidence
High
A vulnerability in the DecodeConfig component of the Golang programming language is related to the possibility that certain
characters in the subject alternative name fields in TLS certificates are mistakenly allowed to have a special value in regular expressions.
value in regular expressions. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service.
remotely to cause a denial of service
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| redos | 7.3 | x86_64 | php-phpseclib | <= 2.0.47-1 | UNKNOWN |
Related
github
github
Name confusion in x509 Subject Alternative Name fields
2024-06-28 00:33:31
osv
osv
Name confusion in x509 Subject Alternative Name fields
2024-06-28 00:33:31
CVE-2023-52892
2024-06-27 22:15:10
cvelist
cvelist
CVE-2023-52892
2024-06-27 00:00:00
cve
cve
CVE-2023-52892
2024-06-27 22:15:10
nvd
nvd
CVE-2023-52892
2024-06-27 22:15:10
debiancve
debiancve
CVE-2023-52892
2024-06-27 22:15:10
ubuntucve
ubuntucve
CVE-2023-52892
2024-06-27 00:00:00