CVE-2018-16875

MEDIUM

Go <1.10.6/1.11.x - DoS

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-16875. PoCs published by alexzorin.

AI-analyzed exploit summary This PoC demonstrates CVE-2018-16875, a DoS vulnerability in Go's TLS certificate verification due to pathological certificate chains. The server generates a 200-level deep certificate chain, causing excessive CPU usage during verification.

Description

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.

Exploits (1)

nomisec WORKING POC 9 stars

by alexzorin · poc

https://github.com/alexzorin/poc-cve-2018-16875

View Code ZIP pw:eip

This PoC demonstrates CVE-2018-16875, a DoS vulnerability in Go's TLS certificate verification due to pathological certificate chains. The server generates a 200-level deep certificate chain, causing excessive CPU usage during verification.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Go (crypto/x509) versions before 1.11.4 and 1.10.8

No auth needed

Prerequisites: Network access to target · Ability to establish TLS connection

MITRE ATT&CK