vulnerability
SUSE: CVE-2018-16875: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Dec 14, 2018 | Dec 20, 2018 | Feb 4, 2022 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Dec 14, 2018
Added
Dec 20, 2018
Modified
Feb 4, 2022
Description
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
Solutions
suse-upgrade-containerdsuse-upgrade-containerd-ctrsuse-upgrade-containerd-kubicsuse-upgrade-containerd-kubic-ctrsuse-upgrade-containerd-kubic-testsuse-upgrade-containerd-testsuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-fish-completionsuse-upgrade-docker-kubicsuse-upgrade-docker-kubic-bash-completionsuse-upgrade-docker-kubic-testsuse-upgrade-docker-kubic-zsh-completionsuse-upgrade-docker-libnetworksuse-upgrade-docker-libnetwork-kubicsuse-upgrade-docker-runcsuse-upgrade-docker-runc-kubicsuse-upgrade-docker-runc-kubic-testsuse-upgrade-docker-runc-testsuse-upgrade-docker-testsuse-upgrade-docker-zsh-completionsuse-upgrade-gosuse-upgrade-go-docsuse-upgrade-go-racesuse-upgrade-go1-10suse-upgrade-go1-10-docsuse-upgrade-go1-10-racesuse-upgrade-go1-11suse-upgrade-go1-11-docsuse-upgrade-go1-11-racesuse-upgrade-go1-12suse-upgrade-go1-12-docsuse-upgrade-go1-12-racesuse-upgrade-golang-github-docker-libnetworksuse-upgrade-golang-github-docker-libnetwork-kubicsuse-upgrade-golang-packagingsuse-upgrade-helmsuse-upgrade-helm-mirrorsuse-upgrade-runcsuse-upgrade-runc-test
References
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.