Improper Verification of Cryptographic Signature in golang.org/x/crypto

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-9283 · ADVISORY
• golang/crypto commit bac4c82 · WEB
• golang/crypto · PACKAGE
• go.dev/cl/220357 · WEB
• go.googlesource.com/crypto/+/bac4c82f69751a6dd76e702d54b3ceb88adab236 · WEB
• groups.google.com/forum · WEB
• groups.google.com/g/golang-announce/c/3L45YRc91SY · WEB
• lists.debian.org/debian-lts-announce/2020/10/msg00014.html · WEB
• lists.debian.org/debian-lts-announce/2020/11/msg00027.html · WEB
• lists.debian.org/debian-lts-announce/2020/11/msg00031.html · WEB
• pkg.go.dev/vuln/GO-2020-0012 · WEB
• exploit-db.com/exploits/48121

Lỗ hổng khác của golang.org/x/crypto

• CVE-2026-78662CAO 7.5Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's …
• CVE-2026-56855CAO 7.5Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. No…
• CVE-2026-56854CAO 7.5The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and…
• GO-2026-5932The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
• CVE-2026-46598TRUNG BÌNH 5.3For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.