Oval Definition:oval:com.ubuntu.bionic:def:2018168750000000
Revision Date:2018-12-14Version:1
Title:CVE-2018-16875 on Ubuntu 18.04 LTS (bionic) - low.
Description:The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-16875
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • golang-1.10 package in bionic is affected and needs fixing.
  • OR golang-1.8 package in bionic is affected and may need fixing.
  • OR golang-1.9 package in bionic is affected and may need fixing.
    • BACK