vulnerability

SUSE: CVE-2018-16875: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Dec 14, 2018
Added
Dec 20, 2018
Modified
Feb 4, 2022

Description

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

Solutions

suse-upgrade-containerdsuse-upgrade-containerd-ctrsuse-upgrade-containerd-kubicsuse-upgrade-containerd-kubic-ctrsuse-upgrade-containerd-kubic-testsuse-upgrade-containerd-testsuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-fish-completionsuse-upgrade-docker-kubicsuse-upgrade-docker-kubic-bash-completionsuse-upgrade-docker-kubic-testsuse-upgrade-docker-kubic-zsh-completionsuse-upgrade-docker-libnetworksuse-upgrade-docker-libnetwork-kubicsuse-upgrade-docker-runcsuse-upgrade-docker-runc-kubicsuse-upgrade-docker-runc-kubic-testsuse-upgrade-docker-runc-testsuse-upgrade-docker-testsuse-upgrade-docker-zsh-completionsuse-upgrade-gosuse-upgrade-go-docsuse-upgrade-go-racesuse-upgrade-go1-10suse-upgrade-go1-10-docsuse-upgrade-go1-10-racesuse-upgrade-go1-11suse-upgrade-go1-11-docsuse-upgrade-go1-11-racesuse-upgrade-go1-12suse-upgrade-go1-12-docsuse-upgrade-go1-12-racesuse-upgrade-golang-github-docker-libnetworksuse-upgrade-golang-github-docker-libnetwork-kubicsuse-upgrade-golang-packagingsuse-upgrade-helmsuse-upgrade-helm-mirrorsuse-upgrade-runcsuse-upgrade-runc-test

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.