Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-03-16T20:55:31

Updated: 2024-08-04T09:48:23.766Z

Reserved: 2020-01-23T00:00:00

Link: CVE-2020-7919

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-03-16T21:15:12.670

Modified: 2024-11-21T05:38:00.570

Link: CVE-2020-7919

cve-icon Redhat

Severity : Important

Publid Date: 2020-01-28T00:00:00Z

Links: CVE-2020-7919 - Bugzilla