CVE-2019-17596

mediumPriorität · verfolgen · 42EPSS 0.047 · 92. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
4.69% (92nd) EPSS
CVSS 5 · medium
Is it mine?
85 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobencri-o-0:1.16.2-13.dev.rhaos4.3.gita83f883.el7.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobencri-o-0:1.16.2-13.dev.rhaos4.3.gita83f883.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobencri-o-0:1.16.2-15.dev.rhaos4.3.gita83f883.el8.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobencri-o-0:1.16.2-15.dev.rhaos4.3.gita83f883.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-0:4.3.1-202001310552.git.0.331f390.el7.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-0:4.3.1-202001310552.git.0.331f390.el8.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-0:4.3.1-202001310552.git.1.075d46a.el7.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-0:4.3.1-202001310552.git.1.075d46a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-0:4.3.1-202001310552.git.1.075d46a.el8.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-0:4.3.1-202001310552.git.1.075d46a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-redistributable-0:4.3.1-202001310552.git.1.075d46a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-clients-redistributable-0:4.3.1-202001310552.git.1.075d46a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-hyperkube-0:4.3.1-202001310552.git.0.331f390.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
  • Behobenopenshift-hyperkube-0:4.3.1-202001310552.git.0.331f390.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf

    Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.

    https://access.redhat.com/errata/RHBA-2020:0390
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Psecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-436USprimärCWE-295USCWE-436US
04

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (85)

Betroffene Produkte und Versionsbereiche.

20 von 85 angezeigt
06

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHBA-2020:0390Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.1 packages update2020-02-12csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.3.1 is now available with updates to packages and images that fix several bugs.

  • WID-SEC-W-2024-1098Red Hat Developer Toolset: Mehrere SchwachstellenDeutsch2020-01-13csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Developer Toolset ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.

  • GO-2022-0213Panic on invalid DSA public keys in crypto/dsa2022-05-24vendor · osvUS

    Invalid DSA public keys can cause a panic in dsa.Verify. In particular, using crypto/x509.Verify on a crafted X.509 certificate chain can lead to a panic, even if the certificates don't chain to a trusted root. The chain can be delivered via a crypto/tls connection to a client, or to a server that accepts and verifies client certificates. net/http clients can be made to crash by an HTTPS server, while net/http servers that accept client certificates will recover the panic and are unaffected. Moreover, an application might crash invoking crypto/x509.(*CertificateRequest).CheckSignature on an X.509 certificate request, parsing a golang.org/x/crypto/openpgp Entity, or during a golang.org/x/crypto/otr conversation. Finally, a golang.org/x/crypto/ssh client can panic due to a malformed host key, while a server could panic if either PublicKeyCallback accepts a malformed public key, or if IsUserAuthority accepts a certificate with a malformed public key.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundnvdredhat_csafosvNVDCVE.orgMITRE
veröffentlicht 2019-10-24geändert 2026-06-17
10

Referenzen (57)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan