CVE-2022-27536

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami golang

[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.1"}]}]

参照URL

advisory groups.google.com
advisory groups.google.com
advisory security.gentoo.org
web security.netapp.com
web nvd.nist.gov