Lucene search
Veracode Vulnerability DatabaseVERACODE:4101HistoryMay 03, 2017 - 2:32 a.m.
Denial Of Service (DoS)
2017-05-0302:32:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.027 Low
EPSS
Percentile
90.6%
crypto/dsa in github.com/golang/go is vulnerable to denial of service (DoS) attacks. These attacks are possible due to a flaw in the Verify function in crypto/dsa/dsa.go. It doesn’t properly check parameters passed to the big integer library. This flaw can be exploited through a a public key given to a program that uses HTTPS client certificates or SSH server libraries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/golang/go | eq | HEAD | |
| github.com/golang/go | le | 1.5.3 | |
| github.com/golang/go | le | 1.6 | |
| golang | eq | 1.4.2__9.el7 |
Related
openvas
openvas
Fedora Update for golang FEDORA-2016-2940
2016-04-18 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-687)
2016-05-09 00:00:00
Fedora Update for golang FEDORA-2016-59
2016-04-26 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: golang-1.5.4-1.fc23
2016-04-25 23:58:13
[SECURITY] Fedora 22 Update: golang-1.5.4-1.fc22
2016-04-25 22:23:12
[SECURITY] Fedora 24 Update: golang-1.6.1-1.fc24
2016-04-17 23:45:26
osv
osv
Denial of service due to unchecked parameters in crypto/dsa
2022-05-24 22:06:33
nvd
nvd
CVE-2016-3959
2016-05-23 19:59:04
nessus
nessus
Amazon Linux AMI : golang (ALAS-2016-687)
2016-04-22 00:00:00
Fedora 23 : golang-1.5.4-1.fc23 (2016-2fcfc7670f)
2016-04-27 00:00:00
Fedora 24 : golang-1.6.1-1.fc24 (2016-2940ad5550)
2016-04-22 00:00:00
cve
cve
CVE-2016-3959
2016-05-23 19:59:04
ubuntucve
ubuntucve
CVE-2016-3959
2016-05-23 00:00:00
amazon
amazon
Medium: golang
2016-04-21 16:00:00
freebsd
freebsd
go -- remote denial of service
2016-04-05 00:00:00
mageia
mageia
Updated golang package fixes CVE-2016-3959
2016-05-24 01:00:58
prion
prion
Design/Logic Flaw
2016-05-23 19:59:00
cvelist
cvelist
CVE-2016-3959
2016-05-23 19:00:00
cloudfoundry
cloudfoundry
CVE-2016-3958/CVE-2016-3959: Golang vulnerabilities | Cloud Foundry
2016-12-29 00:00:00
redhat
redhat
(RHSA-2016:1538) Moderate: golang security, bug fix, and enhancement update
2016-08-02 13:46:33
centos
centos
golang security update
2016-08-02 21:57:55