CVE-2019-6486

Debian Bug report logs - #920548 golang-112: CVE-2019-6486 Package: src:golang-112; Maintainer for src:golang-112 is Go Compiler Team <team+go-compiler@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 26 Jan 2019 20:09:05 UTC Severity: grave Tags: security, upstream Found in v ...

Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks(CVE-2019-6486) Note: This CVE is also fixed in golang-1113-2amzn202 in the golang111 extras repository ...

Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks (CVE-2019-6486) ...

Go before 1108 and 111x before 1115 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks ...

Go before versions 1108 and 1115 has a vulnerability in the crypto/elliptic implementations of the P-521 and P-384 elliptic curves A remote attacker can exploit this by crafting inputs that consume excessive amounts of CPU These inputs might be delivered via TLS handshakes, X509 certificates, JWT tokens, ECDH shares or ECDSA signatures In s ...