Most recent entries from all

bdu:2020-01889

Withdrawn: BELL-CVE-2018-16875 — CVE-2018-16875 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-68416

fkie_cve-2018-16875

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

GHSA-8gx8-4ch8-vgp8

gsd-2018-16875

msrc_CVE-2018-16875 — The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for ea…

msrc_CVE-2018-16875

openSUSE-SU-2019:0189-1 — Security update for docker

Security update for docker

RUSTSEC-2023-0052 — webpki: CPU denial of service in certificate path building

Affected: crates.io: webpki

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building.

Both TLS clients and TLS servers that accept client certificate are affected.

This was previously reported in <https://github.com/briansmith/webpki/issues/69> and re-reported recently by Luke Malinowski.

webpki 0.22.1 included a partial fix and webpki 0.22.2 added further fixes.

SUSE-SU-2018:4297-1 — Security update for containerd, docker and go

Security update for containerd, docker and go

UBUNTU-CVE-2018-16875

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9