CVE-2019-11841
2 advisories.
Go/golang.org/x/crypto CVE-2019-11841: medium 5.9, EPSS 2.00%
Golang/x/crypto message forgery vulnerability
Action: Upgrade golang.org/x/crypto to 0.0.0-20190424203555-c05e17bb3b2d or later.
go get golang.org/x/crypto@v0.0.0-20190424203555-c05e17bb3b2dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20190424203555-c05e17bb3b2d |
Sources
- osv: GHSA-x3jr-pf6g-c48f
- https://nvd.nist.gov/vuln/detail/CVE-2019-11841
- https://github.com/golang/crypto/commit/c05e17bb3b2dca130fc919668a96b4bec9eb9442
- https://github.com/golang/crypto/tree/master/openpgp/clearsign
- https://go-review.git.corp.google.com/c/crypto/+/173778
- https://go.googlesource.com/crypto/+/c05e17bb3b2dca130fc919668a96b4bec9eb9442
- https://groups.google.com/d/msg/golang-openpgp/6vdgZoTgbIY/K6bBY9z3DAAJ
- https://lists.debian.org/debian-lts-announce/2019/09/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/10/msg00014.html
- https://lists.debian.org/debian-lts-announce/2023/06/msg00017.html
- https://pkg.go.dev/vuln/GO-2023-1992
- https://web.archive.org/web/20201207161832/https://sec-consult.com/en/blog/advisories/cleartext-message-spoofing-in-go-cryptography-libraries-cve-2019-11841
- http://packetstormsecurity.com/files/152840/Go-Cryptography-Libraries-Cleartext-Message-Spoofing.html
CVE-2019-11841 · published · modified · JSON
Go/golang.org/x/crypto CVE-2019-11841: unknown, EPSS 2.00%
Misleading message verification in golang.org/x/crypto/openpgp/clearsign
Action: Upgrade golang.org/x/crypto to 0.0.0-20190424203555-c05e17bb3b2d or later.
go get golang.org/x/crypto@v0.0.0-20190424203555-c05e17bb3b2dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20190424203555-c05e17bb3b2d |
Sources
- osv: GO-2023-1992
- https://go-review.git.corp.google.com/c/crypto/+/173778
- https://go.googlesource.com/crypto/+/c05e17bb3b2dca130fc919668a96b4bec9eb9442
- https://groups.google.com/d/msg/golang-openpgp/6vdgZoTgbIY/K6bBY9z3DAAJ
CVE-2019-11841 · published · modified · JSON