Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2020-0173 Moderate: Golang Integer Overflow Exploit

mageia
Calendar Grey April 15, 2020
Dist Mageia Esm H88
Mageia 2020-0174 enhances python libraries correcting a potential buffer overflow which might enable unauthorized access.

Updated golang packages fix security vulnerability: An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit arch...

Summary

Updated golang packages fix security vulnerability:
An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit architectures. A remote attacker could exploit this by supplying a crafted x.509 certificate, or other ASN.1 structure, as either a client or server to crash vulnerable Go applications (CVE-2020-7919).

References

- https://bugs.mageia.org/show_bug.cgi?id=26465

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/S43VLYRURELDWX4D5RFOYBNFGO6CGBBC/

- https://www.cve.org/CVERecord?id=CVE-2020-7919

Topics%20covered

Topics Covered

security advisory remote attack integer overflow Mageia repository update golang packages

Resolution

SRPMS

- 7/core/golang-1.12.17-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 15 Apr 2020
URL: https://advisories.mageia.org/MGASA-2020-0173.html
Type: security
CVE: CVE-2020-7919

Topics%20covered

Topics Covered

security advisory remote attack integer overflow Mageia repository update golang packages

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here