alexmullins/dsa

PoC

Analysis of CVE-2016-3959 and a Proof of Concept Attack Against a Go SSH Server.

view exploit source poc_in_githubauthor alexmullinspublished 2016-04-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-3959US	high7.5	4.36% (91st)	Exploit	2016-05-23
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote at…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.