https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:43:18.069933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01889 bdu:2020-01889 2026-10-03T05:43:18.103524+00:00 bdu:2020-01889 https://cve.radiocsirt.org/vuln/bell-cve-2018-16875 Withdrawn: BELL-CVE-2018-16875 — CVE-2018-16875 does not affect BellSoft software 2026-10-03T05:43:18.103570+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-68416 EUVD-2026-68416 2026-10-03T05:43:18.103590+00:00 EUVD-2026-68416 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16875 fkie_cve-2018-16875 2026-10-03T05:43:18.103602+00:00

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

 https://cve.radiocsirt.org/vuln/ghsa-8gx8-4ch8-vgp8 GHSA-8gx8-4ch8-vgp8 2026-10-03T05:43:18.103629+00:00

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

 https://cve.radiocsirt.org/vuln/gsd-2018-16875 gsd-2018-16875 2026-10-03T05:43:18.103645+00:00 gsd-2018-16875 https://cve.radiocsirt.org/vuln/msrc_cve-2018-16875 msrc_CVE-2018-16875 — The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for ea… 2026-10-03T05:43:18.103663+00:00 msrc_CVE-2018-16875 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0189-1 openSUSE-SU-2019:0189-1 — Security update for docker 2026-10-03T05:43:18.103698+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/rustsec-2023-0052 RUSTSEC-2023-0052 — webpki: CPU denial of service in certificate path building 2026-10-03T05:43:18.103728+00:00

Affected: crates.io: webpki

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building.

Both TLS clients and TLS servers that accept client certificate are affected.

This was previously reported in <https://github.com/briansmith/webpki/issues/69> and re-reported recently by Luke Malinowski.

webpki 0.22.1 included a partial fix and webpki 0.22.2 added further fixes.

 https://cve.radiocsirt.org/vuln/suse-su-2018:4297-1 SUSE-SU-2018:4297-1 — Security update for containerd, docker and go 2026-10-03T05:43:18.103754+00:00

Security update for containerd, docker and go

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16875 UBUNTU-CVE-2018-16875 2026-10-03T05:43:18.103770+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.