Rapid7

vulnerability

Oracle Solaris 11: CVE-2018-16875: Vulnerability in GCC Go

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Dec 14, 2018
Added
Jan 19, 2021
Modified
Feb 17, 2022

Description

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

Solutions

oracle-solaris-11-4-upgrade-developer-gcc-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-common-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-9-2-0-11-4-21-0-1-69-0
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.