Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-16875

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 7.8
References
Products affected by CVE-2018-16875
  • Golang » Go » Version: N/A
    cpe:2.3:a:golang:go:-
  • Golang » Go » Version: 0.0.0-20201203163018-be400aefbc4c
    cpe:2.3:a:golang:go:0.0.0-20201203163018-be400aefbc4c
  • Golang » Go » Version: 1.0
    cpe:2.3:a:golang:go:1.0
  • Golang » Go » Version: 1.0.1
    cpe:2.3:a:golang:go:1.0.1
  • Golang » Go » Version: 1.0.2
    cpe:2.3:a:golang:go:1.0.2
  • Golang » Go » Version: 1.0.3
    cpe:2.3:a:golang:go:1.0.3
  • Golang » Go » Version: 1.1
    cpe:2.3:a:golang:go:1.1
  • Golang » Go » Version: 1.1.1
    cpe:2.3:a:golang:go:1.1.1
  • Golang » Go » Version: 1.1.2
    cpe:2.3:a:golang:go:1.1.2
  • Golang » Go » Version: 1.10
    cpe:2.3:a:golang:go:1.10
  • Golang » Go » Version: 1.10.1
    cpe:2.3:a:golang:go:1.10.1
  • Golang » Go » Version: 1.10.2
    cpe:2.3:a:golang:go:1.10.2
  • Golang » Go » Version: 1.10.3
    cpe:2.3:a:golang:go:1.10.3
  • Golang » Go » Version: 1.10.4
    cpe:2.3:a:golang:go:1.10.4
  • Golang » Go » Version: 1.10.5
    cpe:2.3:a:golang:go:1.10.5
  • Golang » Go » Version: 1.11.0
    cpe:2.3:a:golang:go:1.11.0
  • Golang » Go » Version: 1.11.1
    cpe:2.3:a:golang:go:1.11.1
  • Golang » Go » Version: 1.11.2
    cpe:2.3:a:golang:go:1.11.2
  • Golang » Go » Version: 1.2
    cpe:2.3:a:golang:go:1.2
  • Golang » Go » Version: 1.2.1
    cpe:2.3:a:golang:go:1.2.1
  • Golang » Go » Version: 1.2.2
    cpe:2.3:a:golang:go:1.2.2
  • Golang » Go » Version: 1.3
    cpe:2.3:a:golang:go:1.3
  • Golang » Go » Version: 1.3.1
    cpe:2.3:a:golang:go:1.3.1
  • Golang » Go » Version: 1.3.2
    cpe:2.3:a:golang:go:1.3.2
  • Golang » Go » Version: 1.3.3
    cpe:2.3:a:golang:go:1.3.3
  • Golang » Go » Version: 1.4
    cpe:2.3:a:golang:go:1.4
  • Golang » Go » Version: 1.4.1
    cpe:2.3:a:golang:go:1.4.1
  • Golang » Go » Version: 1.4.2
    cpe:2.3:a:golang:go:1.4.2
  • Golang » Go » Version: 1.4.3
    cpe:2.3:a:golang:go:1.4.3
  • Golang » Go » Version: 1.5
    cpe:2.3:a:golang:go:1.5
  • Golang » Go » Version: 1.5.1
    cpe:2.3:a:golang:go:1.5.1
  • Golang » Go » Version: 1.5.2
    cpe:2.3:a:golang:go:1.5.2
  • Golang » Go » Version: 1.5.3
    cpe:2.3:a:golang:go:1.5.3
  • Golang » Go » Version: 1.5.4
    cpe:2.3:a:golang:go:1.5.4
  • Golang » Go » Version: 1.6
    cpe:2.3:a:golang:go:1.6
  • Golang » Go » Version: 1.6.1
    cpe:2.3:a:golang:go:1.6.1
  • Golang » Go » Version: 1.6.2
    cpe:2.3:a:golang:go:1.6.2
  • Golang » Go » Version: 1.6.3
    cpe:2.3:a:golang:go:1.6.3
  • Golang » Go » Version: 1.6.4
    cpe:2.3:a:golang:go:1.6.4
  • Golang » Go » Version: 1.7
    cpe:2.3:a:golang:go:1.7
  • Golang » Go » Version: 1.7.1
    cpe:2.3:a:golang:go:1.7.1
  • Golang » Go » Version: 1.7.2
    cpe:2.3:a:golang:go:1.7.2
  • Golang » Go » Version: 1.7.3
    cpe:2.3:a:golang:go:1.7.3
  • Golang » Go » Version: 1.7.4
    cpe:2.3:a:golang:go:1.7.4
  • Golang » Go » Version: 1.7.5
    cpe:2.3:a:golang:go:1.7.5
  • Golang » Go » Version: 1.7.6
    cpe:2.3:a:golang:go:1.7.6
  • Golang » Go » Version: 1.8
    cpe:2.3:a:golang:go:1.8
  • Golang » Go » Version: 1.8.1
    cpe:2.3:a:golang:go:1.8.1
  • Golang » Go » Version: 1.8.2
    cpe:2.3:a:golang:go:1.8.2
  • Golang » Go » Version: 1.8.3
    cpe:2.3:a:golang:go:1.8.3
  • Golang » Go » Version: 1.8.4
    cpe:2.3:a:golang:go:1.8.4
  • Golang » Go » Version: 1.8.5
    cpe:2.3:a:golang:go:1.8.5
  • Golang » Go » Version: 1.8.6
    cpe:2.3:a:golang:go:1.8.6
  • Golang » Go » Version: 1.8.7
    cpe:2.3:a:golang:go:1.8.7
  • Golang » Go » Version: 1.9
    cpe:2.3:a:golang:go:1.9
  • Golang » Go » Version: 1.9.1
    cpe:2.3:a:golang:go:1.9.1
  • Golang » Go » Version: 1.9.2
    cpe:2.3:a:golang:go:1.9.2
  • Golang » Go » Version: 1.9.3
    cpe:2.3:a:golang:go:1.9.3
  • Golang » Go » Version: 1.9.4
    cpe:2.3:a:golang:go:1.9.4
  • Golang » Go » Version: 1.9.5
    cpe:2.3:a:golang:go:1.9.5
  • Golang » Go » Version: 1.9.6
    cpe:2.3:a:golang:go:1.9.6
  • Golang » Go » Version: 1.9.7
    cpe:2.3:a:golang:go:1.9.7
  • Opensuse » Leap » Version: 42.3
    cpe:2.3:o:opensuse:leap:42.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved