Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-go | Feb 15, 2019 | Jan 24, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-tests | Apr 27, 2020 | Jan 24, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Mar 12, 2019 | Jan 24, 2019 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 24, 2019 | |
| Debian | debian-upgrade-golang-1-11 | Feb 2, 2019 | Jan 24, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-golang-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-developer-golang-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-crypto-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-crypto-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-image-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-image-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-lint-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-lint-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-net-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-net-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-sys-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-sys-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-text-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-text-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-tools-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-tools-17-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-tour-1-7-6-1-11-4-7-0-1-1-0oracle-solaris-11-4-upgrade-library-golang-tour-17-1-7-6-1-11-4-7-0-1-1-0 | Mar 20, 2019 | Jan 24, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-docker-engineoracle-linux-upgrade-kubeadmoracle-linux-upgrade-kubectloracle-linux-upgrade-kubeletoracle-linux-upgrade-kubernetes-cnioracle-linux-upgrade-kubernetes-cni-plugins | Feb 15, 2019 | Jan 24, 2019 |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 24, 2019 |
| Suse | — | suse-upgrade-containerdsuse-upgrade-containerd-ctrsuse-upgrade-containerd-testsuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-libnetworksuse-upgrade-docker-runcsuse-upgrade-docker-runc-testsuse-upgrade-docker-testsuse-upgrade-docker-zsh-completionsuse-upgrade-gosuse-upgrade-go-docsuse-upgrade-go-racesuse-upgrade-go1-11suse-upgrade-go1-11-docsuse-upgrade-go1-11-racesuse-upgrade-go1-12suse-upgrade-go1-12-docsuse-upgrade-go1-12-racesuse-upgrade-golang-github-docker-libnetwork | Apr 6, 2019 | Jan 24, 2019 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Jan 24, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub