vulnerability

Alpine Linux: CVE-2019-17596: Interpretation Conflict

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Oct 24, 2019
Added
Aug 22, 2024
Modified
Dec 5, 2025

Description

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

Solutions

alpine-linux-upgrade-goalpine-linux-upgrade-containerd
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.